DSA-2024-358: Security Update for Dell Connectrix (Brocade) for Multiple Third-Party Component Vulnerabilities
Summary: Dell Connectrix (Brocade) remediation is available for multiple third-party component Vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Additional Details
CVE-2024-5461 is applicable only to Brocade 6547. This product is not sold by Dell and does not affect Brocade switches sold under Dell Connectix (Brocade).
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| SNMP | CVE-2024-5462 | Brocade Security ID: BSA-2024-2678 |
| libxml2 | CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Brocade Security Advisory ID: BSA-2024-2375 |
Affected Products & Remediation
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
Note: The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Workarounds & Mitigations
| CVE ID | Workaround and Mitigation |
|---|---|
| CVE-2024-5462 | The recommendation is to change SNMP authpassword / privpassword after enabling SNMPv3 password encryption as these secrets could have been previously exposed or may have been previously captured within an internal log that could be exposed on the next Supportsave capture. snmpconfig --set snmpv3 -index <index> {[-user <user_name>] [-groupname {ro | rw} ] [-auth_proto <auth_protocol> -auth_passwd <auth_password> [-priv_proto <priv_protocol> -priv_passwd <priv_password>]] [-engine_id <engine_id>]} |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-08-30 | Initial Release |
| 2.0 | 2024-09-12 | Updated for enhanced presentation with no changes to content |
| 3.0 | 2024-11-20 | Updated the affected versions |
| 4.0 | 2025-02-11 | Updated for enhanced presentation with no changes to content |
Related Information
Legal Disclaimer
Affected Products
Connectrix DS-6610B, Connectrix DS-6620B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix ED-DCX6-4B, Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B
, Connectrix MP-7810B, Connectrix MP-7850B
...
Article Properties
Article Number: 000228212
Article Type: Dell Security Advisory
Last Modified: 11 Feb 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.