DSA-2021-260: Dell PowerPath Management Appliance Security Update for a Hard Coded Encryption Key Vulnerability

Summary: Dell PowerPath Management Appliance remediation is available for a hard coded encryption key vulnerability that may be exploited by malicious users to compromise the affected system.

Bu makale şunlar için geçerlidir: Bu makale şunlar için geçerli değildir: Bu makale, belirli bir ürüne bağlı değildir. Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Diğer kaynaklara göz atın

Impact

High

Details

Proprietary Code CVE Description CVSS Base Score CVSS Vector String
CVE-2021-43587 Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to gain access to secrets and elevate to gain higher privileges. 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Proprietary Code CVE Description CVSS Base Score CVSS Vector String
CVE-2021-43587 Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to gain access to secrets and elevate to gain higher privileges. 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Etkilenen Ürünler ve Düzeltme

Product Affected Versions Updated Versions Link to Update
Dell PowerPath Management Appliance 2.6 3.2 P01 https://www.dell.com/support/home/en-in/product-support/product/powerpath-management-appliance/drivers
3.0
3.0 P01
3.1
3.2
Product Affected Versions Updated Versions Link to Update
Dell PowerPath Management Appliance 2.6 3.2 P01 https://www.dell.com/support/home/en-in/product-support/product/powerpath-management-appliance/drivers
3.0
3.0 P01
3.1
3.2

Revision History

RevisionDateDescription
1.02021-12-09Initial Release

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Yasal Uyarı

Etkilenen Ürünler

Product Security Information
Makale Özellikleri
Article Number: 000194083
Article Type: Dell Security Advisory
Son Değiştirme: 18 Eyl 2025
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.