DSA-2020-200: PowerFlex Security Update for Ready Nodes and AMS Intel Vulnerability (2020.1)
Impact
Medium
Details
Summary:
The Intel component in servers running PowerFlex require a security update in their BIOS version to address this vulnerability. Dell EMC has qualified BIOS version 2.6.4.
| Third-party Component |
CVE(s) |
More information |
| Intel |
CVE-2020-0545 |
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.
To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
| Third-party Component |
CVE(s) |
More information |
| Intel |
CVE-2020-0545 |
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.
To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search.
Affected Products & Remediation
Affected products:
PowerFlex Ready Nodes with BIOS versions prior to 2.6.4
PowerFlex AMS user versions prior to 3.0.1.2
Remediation:
For non-AMS Ready Nodes, upgrade to the latest DTK or OME with BIOS 2.6.4.
For AMS users, the BIOS version is available in our current 3.0.1.2 release.
https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r6hxj&oscode=wst14&productcode=poweredge-r740xd
Dell recommends all customers upgrade at the earliest opportunity.
Affected products:
PowerFlex Ready Nodes with BIOS versions prior to 2.6.4
PowerFlex AMS user versions prior to 3.0.1.2
Remediation:
For non-AMS Ready Nodes, upgrade to the latest DTK or OME with BIOS 2.6.4.
For AMS users, the BIOS version is available in our current 3.0.1.2 release.
https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r6hxj&oscode=wst14&productcode=poweredge-r740xd
Dell recommends all customers upgrade at the earliest opportunity.