DSA-2020-106: Dell Networking Security Advisory for the 2020.1 Intel Platform Update (IPU)

Summary: Virtual Edge Platform 4600 (VEP4600) contains remediation for 2020.1 Intel Platform Update (IPU) that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Impact

High

Details

Intel-SA-002662020.1 IPU Intel® SSD Advisory

  • CVE-2020-0527

Customers should also review their OS vendor’s Security Advisory for information, to ensure appropriate vulnerability identification and patch/configuration measures to be used in conjunction with the updates provided by Dell for the most effective mitigation.

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search.

Intel-SA-002662020.1 IPU Intel® SSD Advisory

  • CVE-2020-0527

Customers should also review their OS vendor’s Security Advisory for information, to ensure appropriate vulnerability identification and patch/configuration measures to be used in conjunction with the updates provided by Dell for the most effective mitigation.

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search.

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Affected products:
Dell Networking Virtual Edge Platform 4600 (VEP 4600)

Remediation:
The following Dell Networking Virtual Edge Platform release contains a resolution to this vulnerability.

We encourage customers to review Intel’s Security Advisory for information, including appropriate identification and mitigation measures. Please visit the Drivers and Downloads site for updates on the applicable products. Note, the following list of impacted products with released BIOS updates are linked. To learn more, visit the Dell Knowledge Base article Dell Updating Firmware using Dell Update Packages (DUP’s), and download the update for your Dell computer.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS and firmware updates automatically once available.

Dell recommends all customers upgrade at the earliest opportunity.

Affected products:
Dell Networking Virtual Edge Platform 4600 (VEP 4600)

Remediation:
The following Dell Networking Virtual Edge Platform release contains a resolution to this vulnerability.

We encourage customers to review Intel’s Security Advisory for information, including appropriate identification and mitigation measures. Please visit the Drivers and Downloads site for updates on the applicable products. Note, the following list of impacted products with released BIOS updates are linked. To learn more, visit the Dell Knowledge Base article Dell Updating Firmware using Dell Update Packages (DUP’s), and download the update for your Dell computer.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS and firmware updates automatically once available.

Dell recommends all customers upgrade at the earliest opportunity.

Workarounds & Mitigations

None

Revision History

RevisionDateDescription
1.02020-12-09Initial Release

Related Information

Affected Products

DELL NETWORKING VEP4600 16-CORE, Dell Networking VEP4600 4-CORE, DELL NETWORKING VEP4600 8-CORE
Article Properties
Article Number: 000180485
Article Type: Dell Security Advisory
Last Modified: 12 Aug 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.