DSA-2025-172: Security Update for Dell Integrated System for Microsoft Azure Stack Hub Multiple Third-Party Component Vulnerabilities
摘要: Dell Integrated System for Microsoft Azure Stack Hub remediation is available for Multiple Third-Party Component Vulnerabilities that could be exploited by malicious users to compromise the affected system. ...
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
High
详情
| Third-party Component | CVEs | More Information |
| UEFI Firmware | CVE-2024-31155, CVE-2024-21859, CVE-2024-39279, CVE-2024-31157, CVE-2024-28047 | INTEL-SA-01198 , INTEL-SA-01139, INTEL-SA-01120 |
| Intel SGX | CVE-2024-36293 | INTEL-SA-01213 |
| Intel Processors | CVE-2024-31068 | INTEL-SA-01166 |
| Ethernet Adapter Complete Driver Pack | CVE-2024-24852, CVE-2024-36274 | INTEL-SA-01144 |
| Intel SPS Firmware | CVE-2024-25571 | INTEL-SA-01120 |
| Data Streaming Accelerator | CVE-2024-37020 | INTEL-SA-01194 |
| Integrated Dell Remote Access Controller 9 | CVE-2023-52340, CVE-2024-42154 | DSA-2024-460 |
| Dell PowerEdge Server BIOS | CVE-2024-38796 | DSA-2025-038 |
受影响的产品和补救措施
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
| CVE-2024-24852, CVE-2024-36274, CVE-2024-37020, CVE-2024-31155, CVE-2024-21859, CVE-2024-25571, CVE-2024-36293, CVE-2024-39279, CVE-2024-31157, CVE-2024-28047, CVE-2024-31068, CVE-2023-52340, CVE-2024-42154, CVE-2024-38796 | Dell Integrated System for Microsoft Azure Stack Hub 16G | Versions prior to 2502 | Version 2502 or later | https://www.dell.com/support/product-details/product/cloud-for-microsoft-azure-stack16g/drivers |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
| CVE-2024-24852, CVE-2024-36274, CVE-2024-37020, CVE-2024-31155, CVE-2024-21859, CVE-2024-25571, CVE-2024-36293, CVE-2024-39279, CVE-2024-31157, CVE-2024-28047, CVE-2024-31068, CVE-2023-52340, CVE-2024-42154, CVE-2024-38796 | Dell Integrated System for Microsoft Azure Stack Hub 16G | Versions prior to 2502 | Version 2502 or later | https://www.dell.com/support/product-details/product/cloud-for-microsoft-azure-stack16g/drivers |
修订历史记录
| Revision | Date | Description |
| 1.0 | 2025-04-09 | Initial Release |
| 2.0 | 2025-04-09 | Advisory updated to include remediation for CVE-2024-24852, CVE-2024-36274, CVE-2024-25571 and CVE-2024-37020 |
| 3.30 | 2025-07-17 | Advisory updated to include remediation for CVE-2023-52340, CVE-2024-42154 and CVE-2024-38796 |
相关信息
法律免责声明
受影响的产品
Integrated System for Microsoft Azure Stack Hub, Integrated System for Microsoft Azure Stack Hub 16G文章属性
文章编号: 000305823
文章类型: Dell Security Advisory
上次修改时间: 17 7月 2025
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。