DSA-2024-336: Dell PowerStore X Security Update for Multiple Vulnerabilities

Résumé: Dell PowerStore Family remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system

Cet article concerne Cet article ne concerne pas Cet article n’est associé à aucun produit spécifique. Toutes les versions du produit ne sont pas identifiées dans cet article.
Consulter d’autres ressources

Impact

Critical

Détails

Third-party Component CVEs More Information
Jackson-databind CVE-2023-35116 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
joblib CVE-2022-21797 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
libzck1 CVE-2023-46228 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
postgresql CVE-2024-1597 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
pycrypto CVE-2018-6594 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
rsync CVE-2020-14387 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recommande à tous les clients de prendre en compte à la fois le score de base CVSS et les scores temporels et environnementaux pertinents qui peuvent avoir un impact sur la gravité potentielle associée à une faille de sécurité donnée.

Produits concernés et mesure corrective

CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 1000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-1000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 3000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-3000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 5000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-5000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 7000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-7000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 9000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-9000/drivers
CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 1000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-1000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 3000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-3000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 5000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-5000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 7000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-7000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 9000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-9000/drivers

Historique des révisions

RevisionDateDescription
1.02024-08-01Initial Release
2.02024-08-01Updated for enhanced presentation with no changes to content.

Informations connexes

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Mention légale

Produits concernés

PowerStore 1000X, PowerStore 3000X, PowerStore 5000X, PowerStore 7000X, PowerStore 9000X, PowerStoreOS
Propriétés de l’article
Numéro d’article: 000227490
Type d’article: Dell Security Advisory
Dernière modification: 01 août 2024
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.