DSA-2024-458: Security Update for Dell PowerProtect Data Manager DM5500 Appliance Multiple Third-Party Component Vulnerabilities
Summary: Dell PowerProtect Data Manager DM5500 Appliance remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. ...
Impact
Critical
Details
| Third-Party Component | CVEs | More information |
|---|---|---|
| PowerEdge Platform BIOS |
CVE-2024-38304, CVE-2024-38303 |
|
| PowerEdge Server |
CVE-2024-24852, CVE-2024-36274, CVE-2024-24853, CVE-2024-21781, CVE-2024-21810. CVE-2024-24983, CVE-2024-23497, CVE-2024-21769, CVE-2024-23981, CVE-2024-24986, CVE-2024-23499, CVE-2024-21807, CVE-2024-21806, CVE-2024-22376 |
|
| iDrac9 |
CVE-2024-6387, CVE-2024-38433 |
|
| VMware (Hypervisor and Hypervisor Manager) |
CVE-2024-37086, CVE-2024-37087, CVE-2024-37081, CVE-2024-37080, CVE-2024-37079, CVE-2024-22275, CVE-2024-22274, CVE-2024-22273 |
|
| Appliance OS |
CVE-2024-33600, CVE-2024-33599, CVE-2024-2961, CVE-2017-9271, CVE-2024-33601, CVE-2024-38428 |
See NVD link below for individual scores for each CVE. |
Affected Products & Remediation
| Product | Software/Firmware | Affected Versions | Updated Version | Link |
|---|---|---|---|---|
| PowerProtect Data Manager Software |
PowerProtect Data Manager DM5500 Appliance |
Versions 5.14.0.0 through 5.17.0.0 |
Version 5.18.0.0 |
Click Link to Download PowerProtect Data Manager DM5500 Appliance 5.18.0.0 Upgrade File |
| Product | Software/Firmware | Affected Versions | Updated Version | Link |
|---|---|---|---|---|
| PowerProtect Data Manager Software |
PowerProtect Data Manager DM5500 Appliance |
Versions 5.14.0.0 through 5.17.0.0 |
Version 5.18.0.0 |
Click Link to Download PowerProtect Data Manager DM5500 Appliance 5.18.0.0 Upgrade File |
Revision History
|
Revision |
Date |
Description |
|---|---|---|
|
1.0 |
2024-11-19 |
Initial Release |
|
2.0 |
2024-12-09 |
Updated for enhanced presentation with no changes to content |