Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000216834


DSA-2023-264: Dell Networking Security Update for Multiple Third-Party Components Vulnerabilities.

Summary: Dell Networking BIOS remediation is available for Multiple Third-Party Components vulnerabilities that could be exploited by malicious users to compromise the affected system.

Article Content


Impact

High

Details

Third-party Component  CVEs  More Information 
2021.1 IPU – BIOS Advisory CVE-2020-12357, CVE-2020-12360, CVE-2020-24486, CVE-2020-8670 Intel-SA-00463 This hyperlink is taking you to a website outside of Dell Technologies.
2021.1 IPU - Intel Processor CVE-2020-24511, CVE-2020-24512 Intel-SA-00464 This hyperlink is taking you to a website outside of Dell Technologies.
2021.1 IPU – Intel Atom Processor CVE-2020-24513 Intel-SA-00465 This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

CVEs Addressed  Product  Software/Firmware Affected Versions  Remediated Versions  Link 
CVE-2020-12360, CVE-2020-24486 Dell Networking Virtual Edge Platform(VEP)4600 Dell Diagnostics OS Recovery Versions prior to UFW 3.5 UFW 3.5 or later https://www.dell.com/support/home/en-us/product-support/product/virtual-edge-platform-4600-16c/drivers
 
CVE-2020-12357, CVE-2020-12360 PowerSwitch Z9332F-ON Dell Networking Firmware Updater Versions prior to 1.1.5 1.1.5 or later https://www.dell.com/support/home/en-us/product-support/product/networking-z9332f-on/drivers
 
CVE-2020-24513 Dell PowerSwitch S-Series S5248-ON Dell Networking Firmware Updater Versions prior to 3.40.5.1-24 3.40.5.1-24 or later https://www.dell.com/support/home/en-us/product-support/product/networking-s5248f-on/drivers
 
CVE-2020-24513 Dell PowerSwitch Z-Series Z9264-ON Dell Networking Firmware Updater Versions prior to 3.42.5.1-17 3.42.5.1-17 or later https://www.dell.com/support/home/en-us/product-support/product/networking-z9264f-on/overview
 
CVE-2020-24513 Virtual Edge Platform 1405(VEP 1425, VEP 1445, VEP1485) Dell Diagnostics OS Versions prior to UFW 2.0 UFW 2.0 or later https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/overview
 
CVE-2020-24513 Dell PowerSwitch N2200-ON Series Dell EMC Networking Firmware Updater Versions prior to 3.45.5.1-28 3.45.5.1-28 or later https://www.dell.com/support/home/en-us/product-support/product/networking-n2200-series/drivers
 
CVE-2020-24513 Dell PowerSwitch N3200-ON Series Dell EMC Networking Firmware Updater Versions prior to 3.45.5.1-28 3.45.5.1-28 or later https://www.dell.com/support/home/en-us/product-support/product/networking-n3200-series/drivers
 
CVE-2020-24513 Dell PowerSwitch
S5448-ON
Dell Networking Firmware Updater Versions prior to 3.52.5.1-6 3.52.5.1-6 or later https://www.dell.com/support/home/en-us/product-support/product/networking-s5448f-on/drivers
 
CVE-2020-24513 Dell PowerSwitch
Z9432F-ON
Dell Networking Firmware Updater Versions prior to 3.51.5.1-11 3.51.5.1-11 or later https://www.dell.com/support/home/en-us/product-support/product/networking-z9432f-on/drivers
 
CVE-2020-24513 Dell SD-WAN Edge 600 Dell EMC SD-WAN Solution 3.50.0.9-13 3.50.0.9-17 or later https://www.dell.com/support/home/en-us/product-support/product/sd-wan-edge-600/drivers
 
CVE-2020-8670, CVE-2020-12357, CVE-2020-24511 Dell Edge Gateway 5200 System BIOS Versions prior to 1.04.10 1.04.10 or later https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=prmn2&oscode=ltsc1&productcode=dell-edge-gateway-5200
 
CVEs Addressed  Product  Software/Firmware Affected Versions  Remediated Versions  Link 
CVE-2020-12360, CVE-2020-24486 Dell Networking Virtual Edge Platform(VEP)4600 Dell Diagnostics OS Recovery Versions prior to UFW 3.5 UFW 3.5 or later https://www.dell.com/support/home/en-us/product-support/product/virtual-edge-platform-4600-16c/drivers
 
CVE-2020-12357, CVE-2020-12360 PowerSwitch Z9332F-ON Dell Networking Firmware Updater Versions prior to 1.1.5 1.1.5 or later https://www.dell.com/support/home/en-us/product-support/product/networking-z9332f-on/drivers
 
CVE-2020-24513 Dell PowerSwitch S-Series S5248-ON Dell Networking Firmware Updater Versions prior to 3.40.5.1-24 3.40.5.1-24 or later https://www.dell.com/support/home/en-us/product-support/product/networking-s5248f-on/drivers
 
CVE-2020-24513 Dell PowerSwitch Z-Series Z9264-ON Dell Networking Firmware Updater Versions prior to 3.42.5.1-17 3.42.5.1-17 or later https://www.dell.com/support/home/en-us/product-support/product/networking-z9264f-on/overview
 
CVE-2020-24513 Virtual Edge Platform 1405(VEP 1425, VEP 1445, VEP1485) Dell Diagnostics OS Versions prior to UFW 2.0 UFW 2.0 or later https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/overview
 
CVE-2020-24513 Dell PowerSwitch N2200-ON Series Dell EMC Networking Firmware Updater Versions prior to 3.45.5.1-28 3.45.5.1-28 or later https://www.dell.com/support/home/en-us/product-support/product/networking-n2200-series/drivers
 
CVE-2020-24513 Dell PowerSwitch N3200-ON Series Dell EMC Networking Firmware Updater Versions prior to 3.45.5.1-28 3.45.5.1-28 or later https://www.dell.com/support/home/en-us/product-support/product/networking-n3200-series/drivers
 
CVE-2020-24513 Dell PowerSwitch
S5448-ON
Dell Networking Firmware Updater Versions prior to 3.52.5.1-6 3.52.5.1-6 or later https://www.dell.com/support/home/en-us/product-support/product/networking-s5448f-on/drivers
 
CVE-2020-24513 Dell PowerSwitch
Z9432F-ON
Dell Networking Firmware Updater Versions prior to 3.51.5.1-11 3.51.5.1-11 or later https://www.dell.com/support/home/en-us/product-support/product/networking-z9432f-on/drivers
 
CVE-2020-24513 Dell SD-WAN Edge 600 Dell EMC SD-WAN Solution 3.50.0.9-13 3.50.0.9-17 or later https://www.dell.com/support/home/en-us/product-support/product/sd-wan-edge-600/drivers
 
CVE-2020-8670, CVE-2020-12357, CVE-2020-24511 Dell Edge Gateway 5200 System BIOS Versions prior to 1.04.10 1.04.10 or later https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=prmn2&oscode=ltsc1&productcode=dell-edge-gateway-5200
 

Workarounds and Mitigations

None

Revision History

Revision DateDescription
1.02023-08-17Initial Release

Related Information


Article Properties


Affected Product
Dell Edge Gateway 5200, Dell EMC Networking VEP1425/VEP1445/VEP1485, PowerSwitch N2200-ON Series, Dell EMC Networking N3200-ON, PowerSwitch S5248F-ON, PowerSwitch S5448F-ON, PowerSwitch Z9264F-ON, PowerSwitch Z9332F-ON, PowerSwitch Z9432F-ON , Dell SD-WAN Edge 600, DELL NETWORKING VEP4600 16-CORE, Dell Networking VEP4600 4-CORE, DELL NETWORKING VEP4600 8-CORE ...
Last Published Date

17 Aug 2023

Version

1

Article Type

Dell Security Advisory