DSA-2025-043: Security Update for Dell UCC Edge Security Update for Multiple Vulnerabilities
概要: Dell UCC Edge remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
High
詳細
| Third-party Component | CVEs | More Information |
| python-certifi | CVE-2024-39689 |
See NVD link below for individual scores for each CVE. |
| JQuery | CVE-2020-11023 |
See NVD link below for individual scores for each CVE. |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2025-22399 | Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery | 7.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2025-22399 | Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery | 7.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L |
影響を受ける製品と修復
| Product | Affected Versions | Remediated Versions | Link |
| Dell UCC Edge | Version prior to 3.0.0 | Version 3.0.0 or later | https://www.dell.com/support/home/product-support/product/ucc-edge/drivers |
| Product | Affected Versions | Remediated Versions | Link |
| Dell UCC Edge | Version prior to 3.0.0 | Version 3.0.0 or later | https://www.dell.com/support/home/product-support/product/ucc-edge/drivers |
変更履歴
| Revision | Date | Description |
| 1.0 | 2025-02-11 | Initial Release |
| 2.0 | 2025-02-11 | Updated table links |
| 3.0 | 2025-02-17 | Updated the affected products |
関連情報
法的免責事項
文書のプロパティ
文書番号: 000279299
文書の種類: Dell Security Advisory
最終更新: 17 2月 2025
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。