DSA-2023-264: Dell Networking Security Update for Multiple Third-Party Components Vulnerabilities.
Summary: Dell Networking BIOS remediation is available for Multiple Third-Party Components vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| 2021.1 IPU – BIOS Advisory | CVE-2020-12357, CVE-2020-12360, CVE-2020-24486, CVE-2020-8670 | Intel-SA-00463  |
| 2021.1 IPU - Intel Processor | CVE-2020-24511, CVE-2020-24512 | Intel-SA-00464 |
| 2021.1 IPU – Intel Atom Processor | CVE-2020-24513 | Intel-SA-00465 |
Affected Products & Remediation
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2020-12360, CVE-2020-24486 | Dell Networking Virtual Edge Platform(VEP)4600 | Dell Diagnostics OS Recovery | Versions prior to UFW 3.5 | UFW 3.5 or later | https://www.dell.com/support/home/en-us/product-support/product/virtual-edge-platform-4600-16c/drivers |
| CVE-2020-12357, CVE-2020-12360 | PowerSwitch Z9332F-ON | Dell Networking Firmware Updater | Versions prior to 1.1.5 | 1.1.5 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9332f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch S-Series S5248-ON | Dell Networking Firmware Updater | Versions prior to 3.40.5.1-24 | 3.40.5.1-24 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5248f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z-Series Z9264-ON | Dell Networking Firmware Updater | Versions prior to 3.42.5.1-17 | 3.42.5.1-17 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9264f-on/overview |
| CVE-2020-24513 | Virtual Edge Platform 1405(VEP 1425, VEP 1445, VEP1485) | Dell Diagnostics OS | Versions prior to UFW 2.0 | UFW 2.0 or later | https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/overview |
| CVE-2020-24513 | Dell PowerSwitch N2200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n2200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch N3200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n3200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch S5448-ON |
Dell Networking Firmware Updater | Versions prior to 3.52.5.1-6 | 3.52.5.1-6 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5448f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z9432F-ON |
Dell Networking Firmware Updater | Versions prior to 3.51.5.1-11 | 3.51.5.1-11 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9432f-on/drivers |
| CVE-2020-24513 | Dell SD-WAN Edge 600 | Dell EMC SD-WAN Solution | 3.50.0.9-13 | 3.50.0.9-17 or later | https://www.dell.com/support/home/en-us/product-support/product/sd-wan-edge-600/drivers |
| CVE-2020-8670, CVE-2020-12357, CVE-2020-24511 | Dell Edge Gateway 5200 | System BIOS | Versions prior to 1.04.10 | 1.04.10 or later | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=prmn2&oscode=ltsc1&productcode=dell-edge-gateway-5200 |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2020-12360, CVE-2020-24486 | Dell Networking Virtual Edge Platform(VEP)4600 | Dell Diagnostics OS Recovery | Versions prior to UFW 3.5 | UFW 3.5 or later | https://www.dell.com/support/home/en-us/product-support/product/virtual-edge-platform-4600-16c/drivers |
| CVE-2020-12357, CVE-2020-12360 | PowerSwitch Z9332F-ON | Dell Networking Firmware Updater | Versions prior to 1.1.5 | 1.1.5 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9332f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch S-Series S5248-ON | Dell Networking Firmware Updater | Versions prior to 3.40.5.1-24 | 3.40.5.1-24 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5248f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z-Series Z9264-ON | Dell Networking Firmware Updater | Versions prior to 3.42.5.1-17 | 3.42.5.1-17 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9264f-on/overview |
| CVE-2020-24513 | Virtual Edge Platform 1405(VEP 1425, VEP 1445, VEP1485) | Dell Diagnostics OS | Versions prior to UFW 2.0 | UFW 2.0 or later | https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/overview |
| CVE-2020-24513 | Dell PowerSwitch N2200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n2200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch N3200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n3200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch S5448-ON |
Dell Networking Firmware Updater | Versions prior to 3.52.5.1-6 | 3.52.5.1-6 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5448f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z9432F-ON |
Dell Networking Firmware Updater | Versions prior to 3.51.5.1-11 | 3.51.5.1-11 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9432f-on/drivers |
| CVE-2020-24513 | Dell SD-WAN Edge 600 | Dell EMC SD-WAN Solution | 3.50.0.9-13 | 3.50.0.9-17 or later | https://www.dell.com/support/home/en-us/product-support/product/sd-wan-edge-600/drivers |
| CVE-2020-8670, CVE-2020-12357, CVE-2020-24511 | Dell Edge Gateway 5200 | System BIOS | Versions prior to 1.04.10 | 1.04.10 or later | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=prmn2&oscode=ltsc1&productcode=dell-edge-gateway-5200 |
Workarounds & Mitigations
None
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-08-17 | Initial Release |
Related Information
Legal Disclaimer
Affected Products
Dell Edge Gateway 5200, Dell EMC Networking VEP1425/VEP1445/VEP1485, PowerSwitch N2200-ON Series, Dell EMC Networking N3200-ON, PowerSwitch S5248F-ON, PowerSwitch S5448F-ON, PowerSwitch Z9264F-ON, PowerSwitch Z9332F-ON, PowerSwitch Z9432F-ON
, Dell SD-WAN Edge 600, DELL NETWORKING VEP4600 16-CORE, Dell Networking VEP4600 4-CORE, DELL NETWORKING VEP4600 8-CORE
...
Article Properties
Article Number: 000216834
Article Type: Dell Security Advisory
Last Modified: 17 Aug 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.