DSA-2021-295: Dell EMC PowerStore Family Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832, and CVE-2022-23307)

Sommaire: Dell EMC PowerStore Family remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...

Cet article s’applique à Cet article ne s’applique pas à Cet article n’est lié à aucun produit spécifique. Toutes les versions de produits ne sont pas identifiées dans cet article.
Consulter d’autres ressources

Impact

Critical

Détails

Third-party Component CVEs More information
Apache log4j CVE-2021-44228 Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2021-45105
CVE-2021-44832
CVE-2022-23307
Third-party Component CVEs More information
Apache log4j CVE-2021-44228 Apache Log4j Remote Code Execution
CVE-2021-45046
CVE-2021-45105
CVE-2021-44832
CVE-2022-23307
Dell Technologies recommande à tous ses clients de tenir compte à la fois du score de base CVSS et de tous les scores temporels et environnementaux pertinents qui pourraient avoir une incidence sur la gravité potentielle associée à une vulnérabilité de sécurité particulière.

Produits touchés et correction

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2021-44228 Dell EMC PowerStore Family Operating System
 		 Versions before 2.0.1.3-1538564 PowerStore T OS Upgrade 2.0.1.3-1538564
PowerStore X OS Upgrade 2.0.1.3-1538564
PowerStore T OS Upgrade 2.1.0.0-1561821		 https://www.dell.com/support/home/?app=drivers
CVE-2021-45046
CVE-2021-45105 Dell EMC PowerStore Family Operating System
 		 Versions before 2.1.1.0-1649887 PowerStore T OS Upgrade 2.1.1.0-1649887
PowerStore X OS 2.1.1.0-1649887
 		 https://www.dell.com/support/home/?app=drivers

See KB article 196367: DSA-2022-014: Dell EMC PowerStore Family Security Update for Multiple Vulnerabilities
CVE-2021-44832
CVE-2022-23307
CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2021-44228 Dell EMC PowerStore Family Operating System
 		 Versions before 2.0.1.3-1538564 PowerStore T OS Upgrade 2.0.1.3-1538564
PowerStore X OS Upgrade 2.0.1.3-1538564
PowerStore T OS Upgrade 2.1.0.0-1561821		 https://www.dell.com/support/home/?app=drivers
CVE-2021-45046
CVE-2021-45105 Dell EMC PowerStore Family Operating System
 		 Versions before 2.1.1.0-1649887 PowerStore T OS Upgrade 2.1.1.0-1649887
PowerStore X OS 2.1.1.0-1649887
 		 https://www.dell.com/support/home/?app=drivers

See KB article 196367: DSA-2022-014: Dell EMC PowerStore Family Security Update for Multiple Vulnerabilities
CVE-2021-44832
CVE-2022-23307

Historique de révision

RevisionDateDescription
1.02021-12-30Initial Release
2.02022-01-26Updated Affected Products and Remediation section: Affected Versions, Updated Versions, and Link to Update
3.02022-04-20Updated Affected Products and Remediation sections: Updated Versions and Link to Update.

Renseignements connexes

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Avis de non-responsabilité

Produits touchés

PowerStore, PowerStore 1000X, PowerStore 1000T, PowerStore 3000X, PowerStore 3000T, PowerStore 5000X, PowerStore 5000T, PowerStore 500T, PowerStore 7000X, PowerStore 7000T, PowerStore 9000X, PowerStore 9000T, Product Security Information
Propriétés de l’article
Numéro d’article: 000194739
Type d’article: Dell Security Advisory
Dernière modification: 21 avr. 2022
Obtenez des réponses à vos questions auprès d’autre utilisateurs de Dell
Services de soutien
Vérifiez si votre appareil est couvert par les services de soutien.