Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Some article numbers may have changed. If this isn't what you're looking for, try searching all articles. Search articles

Article Number: 000197962


DSA-2022-078: Dell Technologies PowerProtect Data Domain Security Update for iDRAC9 and BIOS Vulnerabilities

Summary: Dell Technologies PowerProtect Data Domain (DD) remediation is available for iDRAC9 and BIOS vulnerabilities that may be exploited by malicious users to compromise the affected system.

Article Content


Impact

Medium

Details

Third-party Component  CVEs More information
iDRAC9 CVE-2021-21581 Dell article: DSA-2021-133: Dell iDRAC Security Update for Multiple Security Vulnerabilities
   
 
 
CVE-2021-21580
CVE-2021-21579
CVE-2021-21578
CVE-2021-21577
CVE-2021-21576
CVE-2021-36300
CVE-2021-36301
CVE-2021-36300 Dell article: DSA-2021-177: Dell EMC iDRAC Security Update for Multiple Security Vulnerabilities
CVE-2021-36301
Intel BIOS CVE-2019-14553 Dell article: DSA-2021-176: Dell PowerEdge Server BIOS EDK II Vulnerability
Third-party Component  CVEs More information
iDRAC9 CVE-2021-21581 Dell article: DSA-2021-133: Dell iDRAC Security Update for Multiple Security Vulnerabilities
   
 
 
CVE-2021-21580
CVE-2021-21579
CVE-2021-21578
CVE-2021-21577
CVE-2021-21576
CVE-2021-36300
CVE-2021-36301
CVE-2021-36300 Dell article: DSA-2021-177: Dell EMC iDRAC Security Update for Multiple Security Vulnerabilities
CVE-2021-36301
Intel BIOS CVE-2019-14553 Dell article: DSA-2021-176: Dell PowerEdge Server BIOS EDK II Vulnerability
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product Affected Versions Updated Versions Link to Update
PowerProtect DD
Appliance model: DD6900, DD9400,  and DD9900
 
7.3 to 7.6 7.7.0.0 and later For more details about DDOS versions available for download, see the links below (Registered users must log in to Dell Support to view articles):
Data Domain: DD OS Software Versions.
Data Domain Operating System Software Portal Availability Policy.
7.0, 7.1, and 7.2 7.2.0.80 and later
PowerProtect DD
Appliance model: DD3300
7.3 to 7.7 7.7.1.0 and later
7.0, 7.1, and 7.2 7.2.0.90 and later

Product Affected Versions Updated Versions Link to Update
PowerProtect DD
Appliance model: DD6900, DD9400,  and DD9900
 
7.3 to 7.6 7.7.0.0 and later For more details about DDOS versions available for download, see the links below (Registered users must log in to Dell Support to view articles):
Data Domain: DD OS Software Versions.
Data Domain Operating System Software Portal Availability Policy.
7.0, 7.1, and 7.2 7.2.0.80 and later
PowerProtect DD
Appliance model: DD3300
7.3 to 7.7 7.7.1.0 and later
7.0, 7.1, and 7.2 7.2.0.90 and later

Revision History

RevisionDateDescription
1.02022-03-31Initial Release

Related Information


Article Properties


Affected Product
Data Domain, PowerProtect Data Protection Appliance, Data Domain, DD3300 Appliance, DD120 Appliance, DD140 Appliance, DD160 Appliance, DD200 Appliance, DD2200 Appliance, DD2500 Appliance, DD410 Appliance, DD4200 Appliance, DD430 Appliance , DD4500 Appliance, DD460 Appliance, DD510 Appliance, DD530 Appliance, DD5300 Appliance, DD560 Appliance, DD565 Appliance, DD580 Appliance, DD610 Appliance, DD620 Appliance, DD630 Appliance, DD6300 Appliance, DD640 Appliance, DD6400 Appliance, DD660 Appliance, DD670 Appliance, DD6800 Appliance, DD690 Appliance, DD6900 Appliance, DD7200 Appliance, DD860 Appliance, DD880 Appliance, DD890 Appliance, DD9300 Appliance, DD9400 Appliance, DD9500 Appliance, DD9800 Appliance, DD990 Appliance, DD9900 Appliance, PowerProtect Data Domain Management Center, PowerProtect DD6400, Product Security Information ...
Last Published Date

16 May 2022

Article Type

Dell Security Advisory