DSA-2021-173: Dell EMC VxFlex Ready Node Security Update for Multiple Vulnerabilities

Resumen: Dell EMC VxFlex Ready Node contains remediation for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.
Consulte estos recursos

Impacto

High

Detalles

Component CVE(s) More information
Intel BIOS for VxFlex 14G nodes (R640\R740xd\R840) CVE-2020-24511  
CVE-2020-12358
CVE-2020-12360
CVE-2020-24486
Dell EMC iDRAC for 14G VxFlex Ready nodes (R640\R740xd\R840) CVE-2021-21576  
CVE-2021-21577 
CVE-2021-21578 
CVE-2021-21579 
CVE-2021-21580 
CVE-2021-36301
CVE-2021-21581
CVE-2021-36299
Dell EMC iDRAC for 13G ScaleIO Ready nodes (R630\R730xd) CVE-2021-21580  
CVE-2021-36301
VMWare ESXi CVE-2021-21994 Workaround: See VMware article KB1025757
CVE-2021-21995 Workaround: See VMware articleKB76372
Component CVE(s) More information
Intel BIOS for VxFlex 14G nodes (R640\R740xd\R840) CVE-2020-24511  
CVE-2020-12358
CVE-2020-12360
CVE-2020-24486
Dell EMC iDRAC for 14G VxFlex Ready nodes (R640\R740xd\R840) CVE-2021-21576  
CVE-2021-21577 
CVE-2021-21578 
CVE-2021-21579 
CVE-2021-21580 
CVE-2021-36301
CVE-2021-21581
CVE-2021-36299
Dell EMC iDRAC for 13G ScaleIO Ready nodes (R630\R730xd) CVE-2021-21580  
CVE-2021-36301
VMWare ESXi CVE-2021-21994 Workaround: See VMware article KB1025757
CVE-2021-21995 Workaround: See VMware articleKB76372
Dell Technologies recomienda que todos los clientes tengan en cuenta tanto la puntuación base como cualquier otra puntuación ambiental y temporal relevante que pueda afectar la posible gravedad asociada con la vulnerabilidad de seguridad en particular.

Corrección y productos afectados

CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2020-24511 Dell EMC VxFlex Ready Node(14G) 14G nodes: R640, R740xd & R840 Firmware matrix prior to DTK and OME packages from December 2020
 		 DTK and OME packages from June 2021 or later Dell EMC VxFlex Ready Node firmware update tools:
VxFlex Ready Node Drivers & Downloads

File(s) Name Registered Dell EMC Online Support customers can download the Dell EMC VxFlex Ready Node update at: VxFlex Ready Node Drivers & Downloads

 
CVE-2020-12358
CVE-2020-12360
CVE-2020-24486
CVE-2021-21576
CVE-2021-21577 
CVE-2021-21578 
CVE-2021-21579 
CVE-2021-21580 
CVE-2021-36301
CVE-2021-21581
CVE-2021-36299
CVE-2021-21580  DELL EMC ScaleIO Ready Node (13G) 13G nodes: R630, R730xd
Firmware matrix prior to DTK and OME packages from June 2021
 		 DTK and OME packages from June 2021 or later Dell EMC VxFlex Ready Node firmware update tools: ScaleIO Ready Node-PowerEdge 13G Drivers & Downloads

File(s) Name: Registered Dell EMC Online Support customers can download the Dell EMC VxFlex Ready Node update at: VxFlex Ready Node Drivers & Downloads
CVE-2021-36301
CVE-2020-24511 Dell EMC VxFlex Ready Node AMS managed Nodes 13G nodes: R630, R730xd
14G nodes: R640, R740xd & R840		 Automated Upgrade AMS release with this firmware is Part of 3.0.1.6 release.
Note: iDRAC upgrade is done manually post upgrade
CVE-2020-12358
CVE-2020-12360
CVE-2020-24486
CVE-2021-21576
CVE-2021-21577 
CVE-2021-21578 
CVE-2021-21579 
CVE-2021-21580 
CVE-2021-36301
CVE-2021-21581
CVE-2021-36299
CVE-2021-21994 Dell EMC VxFlex Ready Node OS matrix 7.0 1d and below
6.7 EP18 and below
6.5 EP23 and below		 ESXi 7.0 Update 2a
ESXi 6.7 P05
 		 May 2021
Note: ESXi 6.5 was removed from VxFlex Ready Node OS matrix since June 2021
CVE-2021-21995
CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2020-24511 Dell EMC VxFlex Ready Node(14G) 14G nodes: R640, R740xd & R840 Firmware matrix prior to DTK and OME packages from December 2020
 		 DTK and OME packages from June 2021 or later Dell EMC VxFlex Ready Node firmware update tools:
VxFlex Ready Node Drivers & Downloads

File(s) Name Registered Dell EMC Online Support customers can download the Dell EMC VxFlex Ready Node update at: VxFlex Ready Node Drivers & Downloads

 
CVE-2020-12358
CVE-2020-12360
CVE-2020-24486
CVE-2021-21576
CVE-2021-21577 
CVE-2021-21578 
CVE-2021-21579 
CVE-2021-21580 
CVE-2021-36301
CVE-2021-21581
CVE-2021-36299
CVE-2021-21580  DELL EMC ScaleIO Ready Node (13G) 13G nodes: R630, R730xd
Firmware matrix prior to DTK and OME packages from June 2021
 		 DTK and OME packages from June 2021 or later Dell EMC VxFlex Ready Node firmware update tools: ScaleIO Ready Node-PowerEdge 13G Drivers & Downloads

File(s) Name: Registered Dell EMC Online Support customers can download the Dell EMC VxFlex Ready Node update at: VxFlex Ready Node Drivers & Downloads
CVE-2021-36301
CVE-2020-24511 Dell EMC VxFlex Ready Node AMS managed Nodes 13G nodes: R630, R730xd
14G nodes: R640, R740xd & R840		 Automated Upgrade AMS release with this firmware is Part of 3.0.1.6 release.
Note: iDRAC upgrade is done manually post upgrade
CVE-2020-12358
CVE-2020-12360
CVE-2020-24486
CVE-2021-21576
CVE-2021-21577 
CVE-2021-21578 
CVE-2021-21579 
CVE-2021-21580 
CVE-2021-36301
CVE-2021-21581
CVE-2021-36299
CVE-2021-21994 Dell EMC VxFlex Ready Node OS matrix 7.0 1d and below
6.7 EP18 and below
6.5 EP23 and below		 ESXi 7.0 Update 2a
ESXi 6.7 P05
 		 May 2021
Note: ESXi 6.5 was removed from VxFlex Ready Node OS matrix since June 2021
CVE-2021-21995

Soluciones alternativas y mitigaciones

Historial de revisiones

RevisionDateDescription
1.02021-10-26Initial Release

Información relacionada

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Descargo de responsabilidad

Productos afectados

iDRAC9, VxFlex Ready Nodes, Product Security Information, VxFlex Ready Node, ScaleIO Ready Node-PowerEdge 13G, VxFlex Ready Node R640, VxFlex Ready Node R740xd, VxFlex Ready Node R840
Propiedades del artículo
Número del artículo: 000192818
Tipo de artículo: Dell Security Advisory
Última modificación: 26 oct. 2021
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.