DSA-2022-148: DELL EMC PowerFlex 15G based custom node and 14G based VxFlex Ready Node Security Update for Multiple Vulnerabilities

Summary: Remediation is available for multiple Disk security vulnerabilities that may be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

High

Details

Component CVEs More Information
Intel drives used in PowerFlex custom node and VxFlex Ready Node:
  • Dell Express Flash NVMe P5500/P5600 PCIe SSD Firmware Release
  • SSDSC2KB960G7R, SSDSC2KB019T7R, SSDSC2KB038T7R, SSDSC2KG960G7R, SSDSC2KG019T7R
 CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082
Intel Security Advisory for INTEL-SA-00563 This hyperlink is taking you to a website outside of Dell Technologies.
Component CVEs More Information
Intel drives used in PowerFlex custom node and VxFlex Ready Node:
  • Dell Express Flash NVMe P5500/P5600 PCIe SSD Firmware Release
  • SSDSC2KB960G7R, SSDSC2KB019T7R, SSDSC2KB038T7R, SSDSC2KG960G7R, SSDSC2KG019T7R
 CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082
Intel Security Advisory for INTEL-SA-00563 This hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082 Dell Express Flash NVMe P5500/P5600 PCIe SSD Firmware Release
 		 Versions before 1.1.5 1.1.5 https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=xxn1d
CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082 Dell Express Flash NVMe P4510/P4610 PCIe SSD Firmware Release Versions before VDV1DP25 VDV1DP25 https://www.dell.com/support/home/drivers/driversdetails?driverid=GD4X4
CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082 Intel drives with the Following P/Ns
SSDSC2KB960G7R, SSDSC2KB019T7R, SSDSC2KB038T7R, SSDSC2KG960G7R, SSDSC2KG019T7R		 Versions before DL5C DL5C https://www.dell.com/support/home/drivers/driversdetails?driverid=V141M
CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082 Dell Express Flash NVMe P5500/P5600 PCIe SSD Firmware Release
 		 Versions before 1.1.5 1.1.5 https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=xxn1d
CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082 Dell Express Flash NVMe P4510/P4610 PCIe SSD Firmware Release Versions before VDV1DP25 VDV1DP25 https://www.dell.com/support/home/drivers/driversdetails?driverid=GD4X4
CVE-2021-33078, CVE-2021-33077, CVE-2021-33080, CVE-2021-33074, CVE-2021-33069, CVE-2021-33075, CVE-2021-33083, CVE-2021-33082 Intel drives with the Following P/Ns
SSDSC2KB960G7R, SSDSC2KB019T7R, SSDSC2KB038T7R, SSDSC2KG960G7R, SSDSC2KG019T7R		 Versions before DL5C DL5C https://www.dell.com/support/home/drivers/driversdetails?driverid=V141M

Revision History

RevisionDateDescription
1.02022-05-21Initial release
2.02022-05-25Correct applicable disks

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

VxFlex Ready Nodes, PowerFlex custom node, PowerFlex custom node R650, PowerFlex custom node R750, Product Security Information, VxFlex Ready Node R640, VxFlex Ready Node R740xd, VxFlex Ready Node R840
Article Properties
Article Number: 000200241
Article Type: Dell Security Advisory
Last Modified: 23 Sep 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.