DSA-2024-336: Dell PowerStore X Security Update for Multiple Vulnerabilities

Resumo: Dell PowerStore Family remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system

Este artigo aplica-se a Este artigo não se aplica a Este artigo não está vinculado a nenhum produto específico. Nem todas as versões do produto estão identificadas neste artigo.
Confira outros recursos

Impacto

Critical

Dados

Third-party Component CVEs More Information
Jackson-databind CVE-2023-35116 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
joblib CVE-2022-21797 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
libzck1 CVE-2023-46228 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
postgresql CVE-2024-1597 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
pycrypto CVE-2018-6594 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
rsync CVE-2020-14387 See NVD link below for individual scores for each CVE. 
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e soluções

CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 1000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-1000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 3000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-3000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 5000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-5000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 7000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-7000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 9000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-9000/drivers
CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 1000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-1000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 3000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-3000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 5000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-5000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 7000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-7000/drivers
CVE-2023-35116, CVE-2022-21797, CVE-2023-46228, CVE-2024-1597, CVE-2018-6594, CVE-2020-14387 PowerStore 9000X PowerStoreX OS Versions prior to 3.2.1.3-2334099 Version 3.2.1.3-2334099 or later https://www.dell.com/support/home/product-support/product/powerstore-9000/drivers

Histórico de revisão

RevisionDateDescription
1.02024-08-01Initial Release
2.02024-08-01Updated for enhanced presentation with no changes to content.

Informações relacionadas

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Aviso de isenção legal

Produtos afetados

PowerStore 1000X, PowerStore 3000X, PowerStore 5000X, PowerStore 7000X, PowerStore 9000X, PowerStoreOS
Propriedades do artigo
Número do artigo: 000227490
Tipo de artigo: Dell Security Advisory
Último modificado: 01 ago. 2024
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.