Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Some article numbers may have changed. If this isn't what you're looking for, try searching all articles. Search articles

Article Number: 000194461


DSA-2021-266: Dell EMC Connectrix B-Series SANnav Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, CVE-2022-23302, CVE-2022-23305, CVE-2022-23307, CVE-2019-17571, and CVE-2020-9488)

Summary: Dell Connectrix B-Series SANnav remediation is available for Apache Log4j Remote Code Execution Vulnerability that may potentially be exploited by malicious users to compromise the affected system. ...

Article Content


Impact

Critical

Details

Third-party Component  CVE  More information 
Apache Log4j CVE-2021-44228  Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2022-23302
CVE-2022-23305
CVE-2022-23307
CVE-2019-17571
CVE-2020-9488
Third-party Component  CVE  More information 
Apache Log4j CVE-2021-44228  Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2022-23302
CVE-2022-23305
CVE-2022-23307
CVE-2019-17571
CVE-2020-9488
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product Affected Versions   Updated Versions Link to Update
Dell Connectrix SANnav Management Portal   v2.2.0
Versions before v2.1.1.7
v2.2.0.1
v2.1.1.7 (CSI)
SANnav v2.2.0.1
SANnav v2.1.1.7 (CSI)
Product Affected Versions   Updated Versions Link to Update
Dell Connectrix SANnav Management Portal   v2.2.0
Versions before v2.1.1.7
v2.2.0.1
v2.1.1.7 (CSI)
SANnav v2.2.0.1
SANnav v2.1.1.7 (CSI)

Revision History

Revision     DateDescription
1.02021-12-14     Initial Release     
1.12021-12-28added CVE-2021-45046
1.22021-12-31added link to Broadcom advisory
1.32022-03-21Links to updates added, remediated CVEs added

Related Information


Article Properties


Affected Product

Product Security Information

Last Published Date

24 Mar 2022

Version

8

Article Type

Dell Security Advisory