DSA-2024-358: Security Update for Dell Connectrix (Brocade) for Multiple Third-Party Component Vulnerabilities
Resumo: Dell Connectrix (Brocade) remediation is available for multiple third-party component Vulnerabilities that could be exploited by malicious users to compromise the affected system.
Este artigo aplica-se a
Este artigo não se aplica a
Este artigo não está vinculado a nenhum produto específico.
Nem todas as versões do produto estão identificadas neste artigo.
Impacto
High
Detalhes adicionais
CVE-2024-5461 is applicable only to Brocade 6547. This product is not sold by Dell and does not affect Brocade switches sold under Dell Connectix (Brocade).
Dados
| Third-party Component | CVEs | More Information |
|---|---|---|
| SNMP | CVE-2024-5462 | Brocade Security ID: BSA-2024-2678 |
| libxml2 | CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Brocade Security Advisory ID: BSA-2024-2375 |
Produtos afetados e soluções
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
Note: The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Soluções temporárias e atenuações
| CVE ID | Workaround and Mitigation |
|---|---|
| CVE-2024-5462 | The recommendation is to change SNMP authpassword / privpassword after enabling SNMPv3 password encryption as these secrets could have been previously exposed or may have been previously captured within an internal log that could be exposed on the next Supportsave capture. snmpconfig --set snmpv3 -index <index> {[-user <user_name>] [-groupname {ro | rw} ] [-auth_proto <auth_protocol> -auth_passwd <auth_password> [-priv_proto <priv_protocol> -priv_passwd <priv_password>]] [-engine_id <engine_id>]} |
Histórico de revisão
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-08-30 | Initial Release |
| 2.0 | 2024-09-12 | Updated for enhanced presentation with no changes to content |
| 3.0 | 2024-11-20 | Updated the affected versions |
| 4.0 | 2025-02-11 | Updated for enhanced presentation with no changes to content |
Informações relacionadas
Aviso de isenção legal
Produtos afetados
Connectrix DS-6610B, Connectrix DS-6620B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix ED-DCX6-4B, Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B
, Connectrix MP-7810B, Connectrix MP-7850B
...
Propriedades do artigo
Número do artigo: 000228212
Tipo de artigo: Dell Security Advisory
Último modificado: 11 fev. 2025
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.