DSA-2020-123: Dell EMC Server Platform Security Advisory for Intel SA-00329 – Intel® Processors Data Leakage Advisory
Summary: Dell EMC Servers require a security update to address Intel vulnerabilities.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
Updates are available to address the following security vulnerabilities.
Intel-SA-00329: Intel® Processors Data Leakage Advisory
- CVE-2020-0548: Mitigations are provided with these BIOS updates. Dell expects to work together with its ecosystem partner to further strengthen mitigations in a subsequent BIOS update.
- CVE-2020-0549: Mitigations are provided with these BIOS updates.
Customers should also review their OS vendor’s Security Advisory for information, to ensure appropriate vulnerability identification and patch/configuration measures to be used in conjunction with the updates provided by Dell for the most effective mitigation.
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search.
Updates are available to address the following security vulnerabilities.
Intel-SA-00329: Intel® Processors Data Leakage Advisory
- CVE-2020-0548: Mitigations are provided with these BIOS updates. Dell expects to work together with its ecosystem partner to further strengthen mitigations in a subsequent BIOS update.
- CVE-2020-0549: Mitigations are provided with these BIOS updates.
Customers should also review their OS vendor’s Security Advisory for information, to ensure appropriate vulnerability identification and patch/configuration measures to be used in conjunction with the updates provided by Dell for the most effective mitigation.
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search.
Affected Products & Remediation
The following is a list of impacted products and expected release dates. Dell recommends all customers update at the earliest opportunity.
We encourage customers to review Intel’s Security Advisory for information, including appropriate identification and mitigation measures.
Please visit the Drivers and Downloads site for updates on the applicable products. Note, the following list of impacted products with released BIOS updates are linked. To learn more, visit the Dell Knowledge Base article Dell Updating Firmware using Dell Update Packages (DUP’s), and download the update for your Dell computer. The described Dell notification solutions provide options for the automatic notification and download of the driver, BIOS, and firmware updates once available.
Dell EMC Server Products Affected
| Product | BIOS Update Version (or greater) | Release Date / Expected Release Date (MM/DD/YYYY) |
| R640, R740, R740XD, R940, NX3240, NX3340 | 2.7.7 | 07/14/2020 |
| XC740XD, XC640, XC940 | To be provided upon release | August 2020 |
| R540, R440, T440, XR2 | 2.7.7 | 07/14/2020 |
| R740XD2 | 2.7.7 | 07/14/2020 |
| R840, R940XA | 2.7.7 | 07/14/2020 |
| T640 | 2.7.7 | 07/14/2020 |
| C6420, XC6420 | 2.7.7 | 07/14/2020 |
| FC640, M640, M640P | 2.7.7 | 07/14/2020 |
| MX740C | 2.7.7 | 07/14/2020 |
| MX840C | 2.7.7 | 07/14/2020 |
| C4140 | 2.7.7 | 07/14/2020 |
| T140, T340, R240, R340, NX440 | 2.3.5 | 07/14/2020 |
| T130, T330, R230, R330, NX430 | 2.10.1 | 06/29/2020 |
| DSS9600, DSS9620, DSS9630 | 2.6.3 | 04/15/2020 |
The following is a list of impacted products and expected release dates. Dell recommends all customers update at the earliest opportunity.
We encourage customers to review Intel’s Security Advisory for information, including appropriate identification and mitigation measures.
Please visit the Drivers and Downloads site for updates on the applicable products. Note, the following list of impacted products with released BIOS updates are linked. To learn more, visit the Dell Knowledge Base article Dell Updating Firmware using Dell Update Packages (DUP’s), and download the update for your Dell computer. The described Dell notification solutions provide options for the automatic notification and download of the driver, BIOS, and firmware updates once available.
Dell EMC Server Products Affected
| Product | BIOS Update Version (or greater) | Release Date / Expected Release Date (MM/DD/YYYY) |
| R640, R740, R740XD, R940, NX3240, NX3340 | 2.7.7 | 07/14/2020 |
| XC740XD, XC640, XC940 | To be provided upon release | August 2020 |
| R540, R440, T440, XR2 | 2.7.7 | 07/14/2020 |
| R740XD2 | 2.7.7 | 07/14/2020 |
| R840, R940XA | 2.7.7 | 07/14/2020 |
| T640 | 2.7.7 | 07/14/2020 |
| C6420, XC6420 | 2.7.7 | 07/14/2020 |
| FC640, M640, M640P | 2.7.7 | 07/14/2020 |
| MX740C | 2.7.7 | 07/14/2020 |
| MX840C | 2.7.7 | 07/14/2020 |
| C4140 | 2.7.7 | 07/14/2020 |
| T140, T340, R240, R340, NX440 | 2.3.5 | 07/14/2020 |
| T130, T330, R230, R330, NX430 | 2.10.1 | 06/29/2020 |
| DSS9600, DSS9620, DSS9630 | 2.6.3 | 04/15/2020 |
Related Information
Legal Disclaimer
Affected Products
PowerEdgeArticle Properties
Article Number: 000180620
Article Type: Dell Security Advisory
Last Modified: 18 Sep 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.