DSA-2024-336: Dell PowerStore X Security Update for Multiple Vulnerabilities

Samenvatting: Dell PowerStore Family remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.
Bekijk andere hulpbronnen

Impact

Critical

Gegevens

Third-party Component CVEs More Information
Jackson-databind CVE-2023-35116 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
joblib CVE-2022-21797 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
libzck1 CVE-2023-46228 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
postgresql CVE-2024-1597 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
pycrypto CVE-2018-6594 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
rsync CVE-2020-14387 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 1000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-1000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 3000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-3000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 5000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-5000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 7000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-7000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 9000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-9000/drivers
CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 1000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-1000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 3000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-3000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 5000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-5000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 7000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-7000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 9000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-9000/drivers

Revisiegeschiedenis

RevisionDateDescription
1.02024-08-01Initial Release
2.02024-08-01Updated for enhanced presentation with no changes to content.

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische verklaring van afstand

Getroffen producten

PowerStore 1000X, PowerStore 3000X, PowerStore 5000X, PowerStore 7000X, PowerStore 9000X, PowerStoreOS
Artikeleigenschappen
Artikelnummer: 000227490
Artikeltype: Dell Security Advisory
Laatst aangepast: 01 aug. 2024
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.