DSA-2025-023: Security Update for Dell Connectrix MDS Cisco Bootloader Vulnerability

Riepilogo: Dell Connectrix MDS-Series remediation is available for the Bootloader that could be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Impatto

Medium

Dettagli

Third-party Component CVEs More Information
Bootloader CVE-2024-20397 CVE-2024-20397This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

Product Software/Firmware Affected Versions Remediated Versions Link
Connectrix MDS-Series NX-OS Versions prior to 9.4(2) Versions 9.4(2a) or later https://www.dell.com/support/home/product-support/product/connectrix-mds-series-hardware/drivers
Product Software/Firmware Affected Versions Remediated Versions Link
Connectrix MDS-Series NX-OS Versions prior to 9.4(2) Versions 9.4(2a) or later https://www.dell.com/support/home/product-support/product/connectrix-mds-series-hardware/drivers

Soluzioni alternative e mitigazioni

CVE ID Workaround and Mitigation
CVE-2024-20397

For Cisco MDS and Nexus standalone platforms, if the device was not previously upgraded by using the install all CLI command, the BIOS might not have been upgraded. Even if customers are running a fixed Cisco NX-OS Software release, they are advised to check the BIOS version and use the install all command to complete the BIOS upgrade, if applicable.

So even if the device is running the fixed release we recommend checking the actual BIOS version to be sure.

Cronologia delle revisioni

RevisionDateDescription
1.02025-01-06Initial Release

Informazioni correlate

Prodotti interessati

Connectrix MDS-9124V, Connectrix MDS-9132T, Connectrix MDS-9148S, Connectrix MDS-9148T, Connectrix MDS-9148V, Connectrix MDS-9220i, Connectrix MDS-9250i, Connectrix MDS-9396S, Connectrix MDS-9396S PSI, Connectrix MDS-9396T, Connectrix MDS-9396V , Connectrix MDS-9706, Connectrix MDS-9706-V2, Connectrix MDS-9710, Connectrix MDS-9710-V2, Connectrix MDS-9718, Connectrix MDS-9718-V3, Connectrix MDS-Series Hardware, Connectrix MDS 9132T, Connectrix MDS 9148S, Connectrix MDS 9148T, Connectrix MDS 9396S, Connectrix MDS 9396T ...
Proprietà dell'articolo
Numero articolo: 000261082
Tipo di articolo: Dell Security Advisory
Ultima modifica: 06 gen 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.