DSA-2024-358: Security Update for Dell Connectrix (Brocade) for Multiple Third-Party Component Vulnerabilities
Summary: Dell Connectrix (Brocade) remediation is available for multiple third-party component Vulnerabilities that could be exploited by malicious users to compromise the affected system.
Bu makale şunlar için geçerlidir:
Bu makale şunlar için geçerli değildir:
Bu makale, belirli bir ürüne bağlı değildir.
Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Impact
High
Ek Ayrıntılar
CVE-2024-5461 is applicable only to Brocade 6547. This product is not sold by Dell and does not affect Brocade switches sold under Dell Connectix (Brocade).
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| SNMP | CVE-2024-5462 | Brocade Security ID: BSA-2024-2678 |
| libxml2 | CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Brocade Security Advisory ID: BSA-2024-2375 |
Etkilenen Ürünler ve Düzeltme
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
Note: The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Geçici Çözümler ve Risk Azaltma
| CVE ID | Workaround and Mitigation |
|---|---|
| CVE-2024-5462 | The recommendation is to change SNMP authpassword / privpassword after enabling SNMPv3 password encryption as these secrets could have been previously exposed or may have been previously captured within an internal log that could be exposed on the next Supportsave capture. snmpconfig --set snmpv3 -index <index> {[-user <user_name>] [-groupname {ro | rw} ] [-auth_proto <auth_protocol> -auth_passwd <auth_password> [-priv_proto <priv_protocol> -priv_passwd <priv_password>]] [-engine_id <engine_id>]} |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-08-30 | Initial Release |
| 2.0 | 2024-09-12 | Updated for enhanced presentation with no changes to content |
| 3.0 | 2024-11-20 | Updated the affected versions |
| 4.0 | 2025-02-11 | Updated for enhanced presentation with no changes to content |
Related Information
Yasal Uyarı
Etkilenen Ürünler
Connectrix DS-6610B, Connectrix DS-6620B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix ED-DCX6-4B, Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B
, Connectrix MP-7810B, Connectrix MP-7850B
...
Makale Özellikleri
Article Number: 000228212
Article Type: Dell Security Advisory
Son Değiştirme: 11 Şub 2025
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.