DSA-2023-168: Dell Precision Rack Security Update for Multiple Third-Party Component Vulnerabilities

Summary: Dell Precision Rack remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Medium

Details

Third-Party Component CVE(s) More information
OpenSSL CVE-2023-0215 See NVD (http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.) for individual scores for each CVE.
CVE-2022-4450
CVE-2023-0286
CVE-2022-4304
Tianocore EDK2 CVE-2021-38578

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

CVE(s) Addressed Product BIOS Update Version BIOS Release Date
CVE-2021-38578
Precision Rack 7910		 2.17.0 05/24/2023
CVE-2021-38578 R7910 XL 2.17.0 05/24/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 Precision 7920 Rack 2.18.2 05/19/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 7920 XL Rack 2.18.2 05/19/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 Precision 7960 Rack 1.3.1 04/06/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 Precision 7960 XL Rack 1.3.1 04/06/2023
CVE(s) Addressed Product BIOS Update Version BIOS Release Date
CVE-2021-38578
Precision Rack 7910		 2.17.0 05/24/2023
CVE-2021-38578 R7910 XL 2.17.0 05/24/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 Precision 7920 Rack 2.18.2 05/19/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 7920 XL Rack 2.18.2 05/19/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 Precision 7960 Rack 1.3.1 04/06/2023
CVE-2021-38578, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304 Precision 7960 XL Rack 1.3.1 04/06/2023

Workarounds & Mitigations

None.

Revision History

Revision

Date

Description

1.0

2023-05-30

Initial Release

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

R7910 XL, 7920 XL Rack, Precision 7960 XL Rack, Precision 7920 Rack, Precision Rack 7910, Precision 7960 Rack
Article Properties
Article Number: 000213291
Article Type: Dell Security Advisory
Last Modified: 31 May 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.