Ga naar hoofdinhoud
Uitloggen

Welkom bij Dell

Mijn account
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
Inloggen Een account maken Inloggen bij Premier Aanmelden voor partnerprogramma
Contact

Uw Dell.com-winkelwagentjes

DSA-2024-279: Security Update for Data Protection Advisor for Multiple Vulnerabilities

Samenvatting: Data Protection Advisor remediation is available for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.
Bekijk andere hulpbronnen

Impact

Critical

Gegevens

Third-party Component CVEs More Information

Oracle Java SE (JRE8u411)

 CVE-2024-21892, CVE-2023-41993, CVE-2024-20954, CVE-2024-21098, CVE-2024-21085, CVE-2024-21011, CVE-2024-21068, CVE-2024-21094, CVE-2024-21012, CVE-2024-21003, CVE-2024-21005, CVE-2024-21002, CVE-2024-21004 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

jackson-databind

 CVE-2020-25649, CVE-2020-36518, CVE-2022-42003, CVE-2022-42004, CVE-2021-46877, CVE-2023-35116 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-28974 Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-28974 Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVEs Addressed Product Affected Versions Remediated Versions Link
CVE-2024-21892, CVE-2023-41993, CVE-2024-20954, CVE-2024-21098, CVE-2024-21085, CVE-2024-21011, CVE-2024-21068, CVE-2024-21094, CVE-2024-21012, CVE-2024-21003, CVE-2024-21005, CVE-2024-21002, CVE-2024-21004, CVE-2024-28974, CVE-2020-25649, CVE-2020-36518, CVE-2022-42003, CVE-2022-42004, CVE-2021-46877, CVE-2023-35116 Dell Protection Advisor Versions 19.7,19.8,19.9 and 19.10 Version Data Protection Advisor Agent 19.10 - Build 46

https://www.dell.com/support/home/product-support/product/data-protection-advisor/drivers
CVE-2024-21892, CVE-2023-41993, CVE-2024-20954, CVE-2024-21098, CVE-2024-21085, CVE-2024-21011, CVE-2024-21068, CVE-2024-21094, CVE-2024-21012, CVE-2024-21003, CVE-2024-21005, CVE-2024-21002, CVE-2024-21004, CVE-2024-28974, CVE-2020-25649, CVE-2020-36518, CVE-2022-42003, CVE-2022-42004, CVE-2021-46877, CVE-2023-35116 Dell PowerProtect DP Series Appliance (Integrated Data Protection Appliance)  Versions 2.7.0 through 2.7.6 Version IDPA 2.7.7  https://dl.dell.com/downloads/NGXWR_PowerProtect-DP-Series-IDPA-2.7.7-Upgrade-for-DP4400-and-DP5900-Appliances.gz 
CVEs Addressed Product Affected Versions Remediated Versions Link
CVE-2024-21892, CVE-2023-41993, CVE-2024-20954, CVE-2024-21098, CVE-2024-21085, CVE-2024-21011, CVE-2024-21068, CVE-2024-21094, CVE-2024-21012, CVE-2024-21003, CVE-2024-21005, CVE-2024-21002, CVE-2024-21004, CVE-2024-28974, CVE-2020-25649, CVE-2020-36518, CVE-2022-42003, CVE-2022-42004, CVE-2021-46877, CVE-2023-35116 Dell Protection Advisor Versions 19.7,19.8,19.9 and 19.10 Version Data Protection Advisor Agent 19.10 - Build 46

https://www.dell.com/support/home/product-support/product/data-protection-advisor/drivers
CVE-2024-21892, CVE-2023-41993, CVE-2024-20954, CVE-2024-21098, CVE-2024-21085, CVE-2024-21011, CVE-2024-21068, CVE-2024-21094, CVE-2024-21012, CVE-2024-21003, CVE-2024-21005, CVE-2024-21002, CVE-2024-21004, CVE-2024-28974, CVE-2020-25649, CVE-2020-36518, CVE-2022-42003, CVE-2022-42004, CVE-2021-46877, CVE-2023-35116 Dell PowerProtect DP Series Appliance (Integrated Data Protection Appliance)  Versions 2.7.0 through 2.7.6 Version IDPA 2.7.7  https://dl.dell.com/downloads/NGXWR_PowerProtect-DP-Series-IDPA-2.7.7-Upgrade-for-DP4400-and-DP5900-Appliances.gz 
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
  • Dell recommends that you always upgrade to the latest release/version for your product.
  • To schedule platform security patch installation, or to upgrade your server or for upgrade of other Appliance Models (not DP4400 or DP5900) kindly contact DELL Customer Support at https://www.dell.com/support/home/en-us/

Revisiegeschiedenis

RevisionDateDescription
1.02024-06-27Initial Release
2.02024-07-04Updated for enhanced format presentation with no change to content
3.02024-10-07Updated "AFFECTED PRODUCTS AND REMEDIATION" section as Version IDPA 2.7.7 is released
4.02024-10-08Updated Note in Affected Products and Remediation Section

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische verklaring van afstand

Getroffen producten

PowerProtect Data Protection Appliance, Data Protection Advisor, PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, PowerProtect Data Protection Hardware, Integrated Data Protection Appliance Software , Product Security Information ...
Artikeleigenschappen
Artikelnummer: 000226456
Artikeltype: Dell Security Advisory
Laatst aangepast: 09 okt. 2024
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.