DSA-2022-167: Dell Connectrix Security Update for Multiple Vulnerabilities

摘要: Dell Connectrix (Cisco) remediation is available for multiple Spring vulnerabilities that may be exploited by malicious users to compromise the affected system.

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。

影响

Critical

详情

 Third-party Component CVEs More information
Spring Cloud Function CVE-2022-22963 See NVD (http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.) for individual scores for each CVE.
CVE-2022-22963 | Security | VMware TanzuThis hyperlink is taking you to a website outside of Dell Technologies.
Spring MVC or Spring WebFlux application CVE-2022-22965 See NVD (http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.) for individual scores for each CVE.
CVE-2022-22965 | Security | VMware TanzuThis hyperlink is taking you to a website outside of Dell Technologies.
 Third-party Component CVEs More information
Spring Cloud Function CVE-2022-22963 See NVD (http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.) for individual scores for each CVE.
CVE-2022-22963 | Security | VMware TanzuThis hyperlink is taking you to a website outside of Dell Technologies.
Spring MVC or Spring WebFlux application CVE-2022-22965 See NVD (http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.) for individual scores for each CVE.
CVE-2022-22965 | Security | VMware TanzuThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies 建议所有客户考虑 CVSS 基本分数以及任何相关的时间和环境分数,这可能会影响与特定安全漏洞相关的潜在严重程度。

受影响的产品和补救措施

CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2022-22963 Connectrix (Cisco) DCNM and NDFC
 
DCNM versions before 11.5(4) and NDFC versions before 12.0(2f)
 
NDFC 12.1(1e) Support for Connectrix | Drivers & Downloads | Dell US
CVE-2022-22965
CVEs Addressed Product Affected Versions Updated Versions Link to Update
CVE-2022-22963 Connectrix (Cisco) DCNM and NDFC
 
DCNM versions before 11.5(4) and NDFC versions before 12.0(2f)
 
NDFC 12.1(1e) Support for Connectrix | Drivers & Downloads | Dell US
CVE-2022-22965

修订历史记录

RevisionDateDescription
1.02022-07-19Initial Release
2.02023-02-14Corrected "Affected Product" section under "Article Properties."

相关信息

受影响的产品

Connectrix MDS-Series, Connectrix MDS-9132T, Connectrix MDS-9148S, Connectrix MDS-9148T, Connectrix MDS-9220i, Connectrix MDS-9250i, Connectrix MDS-9396S, Connectrix MDS-9396S PSI, Connectrix MDS-9396T, Connectrix MDS-9706, Connectrix MDS-9706-V2 , Connectrix MDS-9710, Connectrix MDS-9710-V2, Connectrix MDS-9718, Connectrix MDS-9718-V3, Connectrix MDS-Series Data Center Network Manager, Connectrix MDS-Series Nexus Dashboard Fabric Controller, Product Security Information ...
文章属性
文章编号: 000201622
文章类型: Dell Security Advisory
上次修改时间: 18 9月 2025
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。