Article Number: 000224649
DSA-2024-186: Dell Technologies PowerProtect DD Security Update for Multiple Third-Party Component Vulnerabilities
Summary: Dell Technologies PowerProtect DD remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Article Content
Impact
Critical
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| BMC Firmware | CVE-2022-40259, CVE-2022-40242, CVE-2022-2827, CVE-2022-32265, CVE-2022-26872, CVE-2022-40258 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/  |
Affected Products and Remediation
| CVEs Addressed | Product | Software / Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2022-40259, CVE-2022-40242, CVE-2022-2827, CVE-2022-32265, CVE-2022-26872, CVE-2022-40258 | Dell PowerProtect DD2200 appliance | BIOS | Versions prior to 6.2.1.110 | 6.2.1.120 or later | For more details about DDOS versions available for download, see the links below (requires login to Dell Support to view articles): https://www.dell.com/support/kbdoc/334649 https://www.dell.com/support/kbdoc/525902 |
| CVEs Addressed | Product | Software / Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2022-40259, CVE-2022-40242, CVE-2022-2827, CVE-2022-32265, CVE-2022-26872, CVE-2022-40258 | Dell PowerProtect DD2200 appliance | BIOS | Versions prior to 6.2.1.110 | 6.2.1.120 or later | For more details about DDOS versions available for download, see the links below (requires login to Dell Support to view articles): https://www.dell.com/support/kbdoc/334649 https://www.dell.com/support/kbdoc/525902 |
Revision History
|
Revision |
Date |
Description |
|---|---|---|
|
1.0 |
2024-04-30 |
Initial Release |
Related Information
Legal Information
Article Properties
Affected Product
DD2200 Appliance
Last Published Date
30 Apr 2024
Version
1
Article Type
Dell Security Advisory