Article Number: 000207371

DSA-2023-002: Dell PowerEdge Server Security Update for AMD Server Vulnerabilities

Summary: Dell PowerEdge Server remediation is available for AMD Server Vulnerabilities that may be exploited by malicious users to compromise the affected system.

Article Content

Impact

High

Details

Third-Party Component	Proprietary Code CVE(s)	More information
AMD EPYC™ AGESA	CVE-2021-26316	AMD-SN-1032
	CVE-2021-26398
	CVE-2021-39298
	CVE-2021-26402
	CVE-2021-26353
	CVE-2021-26355
	CVE-2023-20529
	CVE-2023-20530
	CVE-2023-20531
	CVE-2022-23813
	CVE-2022-23814
	CVE-2021-26396
	CVE-2021-46779
	CVE-2021-46791
	CVE-2021-26328
	CVE-2021-26407
	CVE-2021-26409
	CVE-2021-46768
	CVE-2021-46767
	CVE-2023-20522
	CVE-2023-20523
	CVE-2021-26404
	CVE-2023-20525
	CVE-2023-20527
	CVE-2023-20528
	CVE-2023-20532
	CVE-2021-26403
	CVE-2021-26343

Third-Party Component	Proprietary Code CVE(s)	More information
AMD EPYC™ AGESA	CVE-2021-26316	AMD-SN-1032
	CVE-2021-26398
	CVE-2021-39298
	CVE-2021-26402
	CVE-2021-26353
	CVE-2021-26355
	CVE-2023-20529
	CVE-2023-20530
	CVE-2023-20531
	CVE-2022-23813
	CVE-2022-23814
	CVE-2021-26396
	CVE-2021-46779
	CVE-2021-46791
	CVE-2021-26328
	CVE-2021-26407
	CVE-2021-26409
	CVE-2021-46768
	CVE-2021-46767
	CVE-2023-20522
	CVE-2023-20523
	CVE-2021-26404
	CVE-2023-20525
	CVE-2023-20527
	CVE-2023-20528
	CVE-2023-20532
	CVE-2021-26403
	CVE-2021-26343

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product	Affected Versions	Updated Versions or greater	Link to Update
R6415	Before 1.18.0	1.18.0	R6415 Drivers & Downloads
R7415	Before 1.18.0	1.18.0	R7415 Drivers & Downloads
R7425	Before 1.18.0	1.18.0	R7425 Drivers & Downloads
XE8545	Before 2.9.3	2.9.3	XE8545 Drivers & Downloads
C6525	Before 2.9.4	2.9.4	C6525 Drivers & Downloads
R6515	Before 2.9.3	2.9.3	R6515 Drivers & Downloads
R7515	Before 2.9.3	2.9.3	R7515 Drivers & Downloads
R6525	Before 2.9.3	2.9.3	R6525 Drivers & Downloads
R7525	Before 2.9.3	2.9.3	R7525 Drivers & Downloads

The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Product	Affected Versions	Updated Versions or greater	Link to Update
R6415	Before 1.18.0	1.18.0	R6415 Drivers & Downloads
R7415	Before 1.18.0	1.18.0	R7415 Drivers & Downloads
R7425	Before 1.18.0	1.18.0	R7425 Drivers & Downloads
XE8545	Before 2.9.3	2.9.3	XE8545 Drivers & Downloads
C6525	Before 2.9.4	2.9.4	C6525 Drivers & Downloads
R6515	Before 2.9.3	2.9.3	R6515 Drivers & Downloads
R7515	Before 2.9.3	2.9.3	R7515 Drivers & Downloads
R6525	Before 2.9.3	2.9.3	R6525 Drivers & Downloads
R7525	Before 2.9.3	2.9.3	R7525 Drivers & Downloads

The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Revision History

Revision	Date	Description
1.0	2023-01-11	Initial release
1.1	2023-01-11	Corrected CVE information to include CVE-2022-23813, CVE-2021-26403, and CVE-2021-26343

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Information

Article Properties

Affected Product

PowerEdge C6525, PowerEdge R6415, PowerEdge R6515, PowerEdge R6525, PowerEdge R7415, PowerEdge R7425, PowerEdge R7515, PowerEdge R7525, PowerEdge XE8545, Product Security Information