DSA-2024-467: Security Update for Dell Connectrix B-Series Component Vulnerabilities

Samenvatting: Dell Connectrix B-Series remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.
Bekijk andere hulpbronnen

Impact

Critical

Gegevens

Third-party Component CVEs More Information
weblinker CVE-2024-10403 BSA-2024-2763This hyperlink is taking you to a website outside of Dell Technologies.
SSH CVE-2024-7516 BSA-2024-2742This hyperlink is taking you to a website outside of Dell Technologies.
IPSEC CVE-2024-7517 BSA-2024-2731This hyperlink is taking you to a website outside of Dell Technologies.
Wpa-supplicant CVE-2024-52160 BSA-2024-2730This hyperlink is taking you to a website outside of Dell Technologies.
Linux Kernel CVE-2024-1086 BSA-2024-2603This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSL CVE-2024-4603, CVE-2023-6237, CVE-2023-6129 BSA-2024-2588This hyperlink is taking you to a website outside of Dell Technologies., BSA-2024-2463This hyperlink is taking you to a website outside of Dell Technologies., BSA-2024-2461This hyperlink is taking you to a website outside of Dell Technologies.
Less CVE-2022-48624 BSA-2024-2600This hyperlink is taking you to a website outside of Dell Technologies.
E2fsprogs CVE-2022-1304 BSA-2024-2648This hyperlink is taking you to a website outside of Dell Technologies.
Sqlite CVE-2023-7104 BSA-2024-2608This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVEs Addressed Product  Software/Firmware  Affected Versions  Remediated Versions  Link 
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions prior to 8.2.3e2 Version 8.2.3e2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions 9.0.0 through 9.2.0c Version 9.2.0c1 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403. CVE-2024-7517, CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.2.1 through 9.2.1a Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-7516 Connectrix B-Series FOS Versions prior to 9.2.2 Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.0 through 9.2.0b1 Version 9.2.0c or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160 Connectrix B-Series SANnav Versions prior to 2.3.0a Version 2.3.1 or later https://www.dell.com/support/home/product-support/product/connectrix-sannav/drivers
CVEs Addressed Product  Software/Firmware  Affected Versions  Remediated Versions  Link 
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions prior to 8.2.3e2 Version 8.2.3e2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions 9.0.0 through 9.2.0c Version 9.2.0c1 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403. CVE-2024-7517, CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.2.1 through 9.2.1a Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-7516 Connectrix B-Series FOS Versions prior to 9.2.2 Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.0 through 9.2.0b1 Version 9.2.0c or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160 Connectrix B-Series SANnav Versions prior to 2.3.0a Version 2.3.1 or later https://www.dell.com/support/home/product-support/product/connectrix-sannav/drivers

Tijdelijke oplossingen en risicobeperking

CVE ID Workaround and Mitigation
CVE-2024-7516

Brocade has added a command that allows Brocade Fabric OS switch admins to enable/disable “StrictHostKeyChecking”

Enable strict host key checking using the “sshutil” CLI:

sshutil stricthostkeycheck -value yes

Disable strict host key checking using the “sshutil” CLI:

sshutil stricthostkeycheck -value no

Verify the current configuration using “sshutil” CLI:

sshutil stricthostkeycheck -show

Revisiegeschiedenis

RevisionDateDescription
1.02024-12-16Initial Release
2.02024-12-20Updated Remediated Versions for clarity
3.02025-01-17Updated for enhanced format presentation with no changes to content

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische verklaring van afstand

Getroffen producten

Connectrix DS-6505B, Connectrix DS-6510B, Connectrix DS-6520B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix DS 6610B, Connectrix DS 6620B, Connectrix ED-DCX6-4B , Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B, Connectrix MP-7810B, Connectrix MP-7840B, Connectrix MP-7850B ...
Artikeleigenschappen
Artikelnummer: 000259787
Artikeltype: Dell Security Advisory
Laatst aangepast: 18 feb. 2025
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.