DSA-2023-264: Dell Networking Security Update for Multiple Third-Party Components Vulnerabilities.
Yhteenveto: Dell Networking BIOS remediation is available for Multiple Third-Party Components vulnerabilities that could be exploited by malicious users to compromise the affected system.
Tämä artikkeli koskee tuotetta
Tämä artikkeli ei koske tuotetta
Tämä artikkeli ei liity tiettyyn tuotteeseen.
Tässä artikkelissa ei yksilöidä kaikkia tuoteversioita.
Vaikutus
High
Tiedot
| Third-party Component | CVEs | More Information |
|---|---|---|
| 2021.1 IPU – BIOS Advisory | CVE-2020-12357, CVE-2020-12360, CVE-2020-24486, CVE-2020-8670 | Intel-SA-00463  |
| 2021.1 IPU - Intel Processor | CVE-2020-24511, CVE-2020-24512 | Intel-SA-00464 |
| 2021.1 IPU – Intel Atom Processor | CVE-2020-24513 | Intel-SA-00465 |
Tuotteet, joihin asia vaikuttaa, ja tilanteen korjaaminen
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2020-12360, CVE-2020-24486 | Dell Networking Virtual Edge Platform(VEP)4600 | Dell Diagnostics OS Recovery | Versions prior to UFW 3.5 | UFW 3.5 or later | https://www.dell.com/support/home/en-us/product-support/product/virtual-edge-platform-4600-16c/drivers |
| CVE-2020-12357, CVE-2020-12360 | PowerSwitch Z9332F-ON | Dell Networking Firmware Updater | Versions prior to 1.1.5 | 1.1.5 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9332f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch S-Series S5248-ON | Dell Networking Firmware Updater | Versions prior to 3.40.5.1-24 | 3.40.5.1-24 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5248f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z-Series Z9264-ON | Dell Networking Firmware Updater | Versions prior to 3.42.5.1-17 | 3.42.5.1-17 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9264f-on/overview |
| CVE-2020-24513 | Virtual Edge Platform 1405(VEP 1425, VEP 1445, VEP1485) | Dell Diagnostics OS | Versions prior to UFW 2.0 | UFW 2.0 or later | https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/overview |
| CVE-2020-24513 | Dell PowerSwitch N2200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n2200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch N3200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n3200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch S5448-ON |
Dell Networking Firmware Updater | Versions prior to 3.52.5.1-6 | 3.52.5.1-6 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5448f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z9432F-ON |
Dell Networking Firmware Updater | Versions prior to 3.51.5.1-11 | 3.51.5.1-11 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9432f-on/drivers |
| CVE-2020-24513 | Dell SD-WAN Edge 600 | Dell EMC SD-WAN Solution | 3.50.0.9-13 | 3.50.0.9-17 or later | https://www.dell.com/support/home/en-us/product-support/product/sd-wan-edge-600/drivers |
| CVE-2020-8670, CVE-2020-12357, CVE-2020-24511 | Dell Edge Gateway 5200 | System BIOS | Versions prior to 1.04.10 | 1.04.10 or later | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=prmn2&oscode=ltsc1&productcode=dell-edge-gateway-5200 |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2020-12360, CVE-2020-24486 | Dell Networking Virtual Edge Platform(VEP)4600 | Dell Diagnostics OS Recovery | Versions prior to UFW 3.5 | UFW 3.5 or later | https://www.dell.com/support/home/en-us/product-support/product/virtual-edge-platform-4600-16c/drivers |
| CVE-2020-12357, CVE-2020-12360 | PowerSwitch Z9332F-ON | Dell Networking Firmware Updater | Versions prior to 1.1.5 | 1.1.5 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9332f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch S-Series S5248-ON | Dell Networking Firmware Updater | Versions prior to 3.40.5.1-24 | 3.40.5.1-24 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5248f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z-Series Z9264-ON | Dell Networking Firmware Updater | Versions prior to 3.42.5.1-17 | 3.42.5.1-17 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9264f-on/overview |
| CVE-2020-24513 | Virtual Edge Platform 1405(VEP 1425, VEP 1445, VEP1485) | Dell Diagnostics OS | Versions prior to UFW 2.0 | UFW 2.0 or later | https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/overview |
| CVE-2020-24513 | Dell PowerSwitch N2200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n2200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch N3200-ON Series | Dell EMC Networking Firmware Updater | Versions prior to 3.45.5.1-28 | 3.45.5.1-28 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-n3200-series/drivers |
| CVE-2020-24513 | Dell PowerSwitch S5448-ON |
Dell Networking Firmware Updater | Versions prior to 3.52.5.1-6 | 3.52.5.1-6 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-s5448f-on/drivers |
| CVE-2020-24513 | Dell PowerSwitch Z9432F-ON |
Dell Networking Firmware Updater | Versions prior to 3.51.5.1-11 | 3.51.5.1-11 or later | https://www.dell.com/support/home/en-us/product-support/product/networking-z9432f-on/drivers |
| CVE-2020-24513 | Dell SD-WAN Edge 600 | Dell EMC SD-WAN Solution | 3.50.0.9-13 | 3.50.0.9-17 or later | https://www.dell.com/support/home/en-us/product-support/product/sd-wan-edge-600/drivers |
| CVE-2020-8670, CVE-2020-12357, CVE-2020-24511 | Dell Edge Gateway 5200 | System BIOS | Versions prior to 1.04.10 | 1.04.10 or later | https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=prmn2&oscode=ltsc1&productcode=dell-edge-gateway-5200 |
Kiertotavat ja lievennyskeinot
None
Versiohistoria
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-08-17 | Initial Release |
Asiaan liittyvät tiedot
Vastuuvapauslauseke
Tuotteet, joihin vaikutus kohdistuu
Dell Edge Gateway 5200, Dell EMC Networking VEP1425/VEP1445/VEP1485, PowerSwitch N2200-ON Series, Dell EMC Networking N3200-ON, PowerSwitch S5248F-ON, PowerSwitch S5448F-ON, PowerSwitch Z9264F-ON, PowerSwitch Z9332F-ON, PowerSwitch Z9432F-ON
, Dell SD-WAN Edge 600, DELL NETWORKING VEP4600 16-CORE, Dell Networking VEP4600 4-CORE, DELL NETWORKING VEP4600 8-CORE
...
Artikkelin ominaisuudet
Artikkelin numero: 000216834
Artikkelin tyyppi: Dell Security Advisory
Viimeksi muutettu: 17 elok. 2023
Etsi vastauksia kysymyksiisi muilta Dell-käyttäjiltä
Tukipalvelut
Tarkista, kuuluuko laitteesi tukipalveluiden piiriin.