DSA-2024-246: Security Update for Dell PowerFlex Appliance Multiple Third-Party Component Vulnerabilities
Résumé: Dell PowerFlex Appliance remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Impact
High
Détails supplémentaires
In the case of manual upgrade for PowerFlex appliance, please see this link: https://www.dell.com/support/home/product-support/product/powerflex-appliance-int-ca-sw/drivers
Détails
| Third-party Component | CVEs | More Information |
|---|---|---|
| Dell PowerEdge Server BIOS | CVE-2024-0162, CVE-2024-0163, CVE-2024-0154, CVE-2024-0173, CVE-2023-31346, CVE-2023-31347, CVE-2024-0161 | DSA-2024-004 DSA-2024-003 DSA-2024-034 DSA-2024-002 DSA-2024-006 |
| Intel | CVE-2023-32666, CVE-2023-38575, CVE-2023-39368, CVE-2023-22655, CVE-2023-35191, CVE-2024-21828 | DSA-2024-005 DSA-2024-206 |
| VMware | CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255, CVE-2024-22274, CVE-2024-22275, CVE-2024-37087, CVE-2024-37079, CVE-2024-37080, CVE-2024-37081 |
VMSA-2024-0006  VMSA-2024-0011 VMSA-2024-0013 VMSA-2024-0012 |
| iDRAC | CVE-2023-29499 | DSA-2024-286 |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2025-30481 | Dell Management VM, version(s) prior to 4.6.0, contain(s) deprecated cryptographic settings. An adjacent unauthenticated attacker could potentially exploit this vulnerability leading to man-in-the-middle attack. | 3.1 | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2025-30481 | Dell Management VM, version(s) prior to 4.6.0, contain(s) deprecated cryptographic settings. An adjacent unauthenticated attacker could potentially exploit this vulnerability leading to man-in-the-middle attack. | 3.1 | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
Produits concernés et mesure corrective
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| PowerFlex Appliance | Intelligent Catalogue (IC) | Versions prior to IC-46.375.01 | Version IC-46.375.01 | IC release |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| PowerFlex Appliance | Intelligent Catalogue (IC) | Versions prior to IC-46.375.01 | Version IC-46.375.01 | IC release |
Historique des révisions
| Revision | Date | Description |
| 1.0 | 2024-06-11 | Initial Release |
| 2.0 | 2024-07-22 | Added VMware and iDRAC CVE |
| 3.0 | 2025-11-24 | Added details for CVE-2025-30481 |
Informations connexes
Mention légale
Produits concernés
PowerFlex Appliance, PowerFlex appliance connectivity, PowerFlex appliance Intelligent Catalog Software, PowerFlex appliance R650, PowerFlex appliance R6525, PowerFlex appliance R660, PowerFlex appliance R6625, Powerflex appliance R750
, PowerFlex appliance R760, PowerFlex appliance R7625, Product Security Information, PowerFlex appliance R640, PowerFlex appliance R740XD, PowerFlex appliance R7525, PowerFlex appliance R840
...
Propriétés de l’article
Numéro d’article: 000225977
Type d’article: Dell Security Advisory
Dernière modification: 24 nov. 2025
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.