DSA-2024-467: Security Update for Dell Connectrix B-Series Component Vulnerabilities

Resumen: Dell Connectrix B-Series remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.
Consulte estos recursos

Impacto

Critical

Detalles

Third-party Component CVEs More Information
weblinker CVE-2024-10403 BSA-2024-2763This hyperlink is taking you to a website outside of Dell Technologies.
SSH CVE-2024-7516 BSA-2024-2742This hyperlink is taking you to a website outside of Dell Technologies.
IPSEC CVE-2024-7517 BSA-2024-2731This hyperlink is taking you to a website outside of Dell Technologies.
Wpa-supplicant CVE-2024-52160 BSA-2024-2730This hyperlink is taking you to a website outside of Dell Technologies.
Linux Kernel CVE-2024-1086 BSA-2024-2603This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSL CVE-2024-4603, CVE-2023-6237, CVE-2023-6129 BSA-2024-2588This hyperlink is taking you to a website outside of Dell Technologies., BSA-2024-2463This hyperlink is taking you to a website outside of Dell Technologies., BSA-2024-2461This hyperlink is taking you to a website outside of Dell Technologies.
Less CVE-2022-48624 BSA-2024-2600This hyperlink is taking you to a website outside of Dell Technologies.
E2fsprogs CVE-2022-1304 BSA-2024-2648This hyperlink is taking you to a website outside of Dell Technologies.
Sqlite CVE-2023-7104 BSA-2024-2608This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recomienda que todos los clientes tengan en cuenta tanto la puntuación base como cualquier otra puntuación ambiental y temporal relevante que pueda afectar la posible gravedad asociada con la vulnerabilidad de seguridad en particular.

Corrección y productos afectados

CVEs Addressed Product  Software/Firmware  Affected Versions  Remediated Versions  Link 
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions prior to 8.2.3e2 Version 8.2.3e2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions 9.0.0 through 9.2.0c Version 9.2.0c1 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403. CVE-2024-7517, CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.2.1 through 9.2.1a Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-7516 Connectrix B-Series FOS Versions prior to 9.2.2 Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.0 through 9.2.0b1 Version 9.2.0c or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160 Connectrix B-Series SANnav Versions prior to 2.3.0a Version 2.3.1 or later https://www.dell.com/support/home/product-support/product/connectrix-sannav/drivers
CVEs Addressed Product  Software/Firmware  Affected Versions  Remediated Versions  Link 
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions prior to 8.2.3e2 Version 8.2.3e2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions 9.0.0 through 9.2.0c Version 9.2.0c1 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403. CVE-2024-7517, CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.2.1 through 9.2.1a Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-7516 Connectrix B-Series FOS Versions prior to 9.2.2 Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.0 through 9.2.0b1 Version 9.2.0c or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160 Connectrix B-Series SANnav Versions prior to 2.3.0a Version 2.3.1 or later https://www.dell.com/support/home/product-support/product/connectrix-sannav/drivers

Soluciones alternativas y mitigaciones

CVE ID Workaround and Mitigation
CVE-2024-7516

Brocade has added a command that allows Brocade Fabric OS switch admins to enable/disable “StrictHostKeyChecking”

Enable strict host key checking using the “sshutil” CLI:

sshutil stricthostkeycheck -value yes

Disable strict host key checking using the “sshutil” CLI:

sshutil stricthostkeycheck -value no

Verify the current configuration using “sshutil” CLI:

sshutil stricthostkeycheck -show

Historial de revisiones

RevisionDateDescription
1.02024-12-16Initial Release
2.02024-12-20Updated Remediated Versions for clarity
3.02025-01-17Updated for enhanced format presentation with no changes to content

Información relacionada

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Descargo de responsabilidad

Productos afectados

Connectrix DS-6505B, Connectrix DS-6510B, Connectrix DS-6520B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix DS 6610B, Connectrix DS 6620B, Connectrix ED-DCX6-4B , Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B, Connectrix MP-7810B, Connectrix MP-7840B, Connectrix MP-7850B ...
Propiedades del artículo
Número del artículo: 000259787
Tipo de artículo: Dell Security Advisory
Última modificación: 18 feb 2025
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.