DSA-2025-339: Security Update for Dell Avamar Data Store Gen5A Multiple Third-Party Component Vulnerabilities

摘要: Dell Avamar Data Store Gen5A remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

本文章適用於 本文章不適用於 本文無關於任何特定產品。 本文未識別所有產品版本。
查看其他資源

影響

Critical

詳細資料

Third-party Component CVEs More Information
Dell PowerEdge Server BIOS CVE-2024-38796, CVE-2024-28956, CVE-2024-45332, CVE-2024-48012 DSA-2025-038, DSA-2025-041, DSA-2025-156, DSA-2025-046 
Integrated Dell Remote Access Controller (iDRAC) CVE-2025-26466, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2023-6780, CVE-2024-52533, CVE-2023-52340, CVE-2024-42154 DSA-2025-145. DSA-2025-146, DSA-2024-460 

 

Dell Technologies 建議所有客戶不僅要參考 CVSS 基本分數，也要將可能會影響與特定安全漏洞相關之潛在嚴重性的所有相關暫時和環境分數納入考量。

受影響的產品與補救措施

Product Software/Firmware Affected Versions Remediated Versions Link
Avamar Data Store Gen5A Dell PowerEdge Server BIOS Versions prior to 2.24.0 Version 2.24.0 Avamar Data Store Gen5A Update for Server Nodes (Hotfix 338901)
Avamar Data Store Gen5A Integrated Dell Remote Access Controller (iDRAC) Versions prior to 7.00.00.181 Version 7.00.00.181 Avamar Data Store Gen5A Update for Server Nodes (Hotfix 338901)

 

Product Software/Firmware Affected Versions Remediated Versions Link
Avamar Data Store Gen5A Dell PowerEdge Server BIOS Versions prior to 2.24.0 Version 2.24.0 Avamar Data Store Gen5A Update for Server Nodes (Hotfix 338901)
Avamar Data Store Gen5A Integrated Dell Remote Access Controller (iDRAC) Versions prior to 7.00.00.181 Version 7.00.00.181 Avamar Data Store Gen5A Update for Server Nodes (Hotfix 338901)

 

Notes:

Known Issue:

  • Upgrading directly to the August 2025 firmware, which includes BIOS 2.24.0, may fail on systems running BIOS versions prior to 2.12.2, due to compatibility constraints.

  
Required Action: 

  
    
   
  • To verify the BIOS version, run the following command in the Avamar console as an admin/root user:
    • 
  

  
     omreport system version

  
    
   
  • If the BIOS version is earlier than 2.12.2 contact Dell Customer Support to apply the September 2021 firmware block (AVP: Gen5aSep2021Blk338753.avp) before installing the August 2025 firmware.
    • 
  

  

    
因應措施與緩解措施

    
None


    
修訂歷史記錄

    
RevisionDateDescription
1.02025-09-01Initial Release
2.02025-10-06Replaced the NVD generic search link with the PowerEdge and iDrac advisories
3.02025-10-22Major update to include CVE-2024-48012
4.02025-12-30Updated 'Additional Information' section


 

    
相關資訊

    
Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide


        


        

        
法律免責聲明

        

        
受影響的產品

        Avamar, Avamar Data Store, Avamar Data Store Gen5A, Avamar Server







                        

                            

    

        

            

                
                    
 文章屬性

                
            

            

                

                        
文章編號: 000362542

                

                
                

                        
文章類型: Dell Security Advisory

                

                

                        
上次修改時間: 30 12月 2025


                


            


        

    

    

        

            

                
                    
向其他 Dell 使用者尋求您問題的答案

                
            

            

                

                    
                



            


        

    

    

        

            

                
                    
支援服務

                
            

            

                

                    檢查您的裝置是否在支援服務的涵蓋範圍內。