DSA-2022-133: Dell EMC RecoverPoint Security Update Multiple Vulnerabilities
Summary: Dell EMC RecoverPoint Remediation is available for multiple vulnerabilities that may be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Third-party Component | CVEs | More information |
| Polkit | CVE-2021-4034 | Privilege Escalation Vulnerability |
| Apache Log4j | CVE-2021-44832 | Apache Log4j Remote Code Execution |
| Third-party Component | CVEs | More information |
| Polkit | CVE-2021-4034 | Privilege Escalation Vulnerability |
| Apache Log4j | CVE-2021-44832 | Apache Log4j Remote Code Execution |
Affected Products & Remediation
| Product | Affected Versions | Updated Versions | Link to Update |
| RecoverPoint for Virtual machines | 5.3 SP2 P4 5.3 SP2 P3 5.3 SP2 P2 5.3 SP2 P1 5.3 SP1 P1 5.3 SP2 5.3 SP1 5.3 |
5.3.3 | https://www.dell.com/support/home/en-us/product-support/product/recoverpoint-for-virtual-machines/drivers |
Note: Dell EMC recommends that RecoverPoint for VMs customers can upgrade to RecoverPoint for VMs 5.3.3 version which has full remediation to CVE-2021-44832.
| Product | Affected Versions | Updated Versions | Link to Update |
| RecoverPoint for Virtual machines | 5.3 SP2 P4 5.3 SP2 P3 5.3 SP2 P2 5.3 SP2 P1 5.3 SP1 P1 5.3 SP2 5.3 SP1 5.3 |
5.3.3 | https://www.dell.com/support/home/en-us/product-support/product/recoverpoint-for-virtual-machines/drivers |
Note: Dell EMC recommends that RecoverPoint for VMs customers can upgrade to RecoverPoint for VMs 5.3.3 version which has full remediation to CVE-2021-44832.
Workarounds & Mitigations
None.
Revision History
| Revision | Date | Description |
| 1.0 | 2022-05-16 | Initial Release |
| 2.0 | 2022-05-17 | Updated Versions |
Related Information
Legal Disclaimer
Affected Products
Product Security Information, RecoverPoint for Virtual MachinesArticle Properties
Article Number: 000199729
Article Type: Dell Security Advisory
Last Modified: 17 May 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.