Dell EMC Updates | Security Alerts

The official site for Saudi CERT Sign In | العربية |

| A+ A-

Your review has been sent successfully

Dell EMC Updates

3477

Classification

Security Alert

● Critical

● High

● Medium

● Low

Warning Date

Severity Level

Warning Number

Target Sector

14 January, 2020

● Critical

2020-791

All

Description:

Dell EMC has released security update to address a vulnerability in the following products:

Dell EMC VxRail Manager

versions 4.0.x prior to 4.0.600

4.5.x prior to 4.5.401

4.7.x prior to 4.7.301

Dell EMC Cyber Recovery versions prior to 18.1.1.4-10 and 19.1.0.6-10

Threats:

Attacker could exploit these vulnerabilities by doing the following:

Information disclosure.
Denial of service attack (DoS).

Best practice and Recommendations:

The CERT team encourages users to review Dell EMC security advisory and apply the necessary updates:

https://www.dell.com/support/security/en-us/details/540142/DSA-2020-013-VxRail-Security-Update-for-VMware-vCenter-Server-Appliance-e-File-Based-Backup-and-R

https://www.dell.com/support/security/en-us/details/540140/DSA-2020-012-VxRail-Security-Update-for-VMware-ESXi-denial-of-service-vulnerability

https://www.dell.com/support/security/en-us/details/540139/DSA-2020-011-Dell-EMC-VxRail-Manager-Security-Update-for-Multiple-Hardware-Appliance-Firmware-Vul

https://www.dell.com/support/security/en-us/details/540138/DSA-2020-004-Dell-EMC-Cyber-Recovery-Security-Update-for-Multiple-Third-Party-Component-Vulnerabi

https://www.dell.com/support/security/en-us/details/540137/DSA-2020-007-Dell-EMC-Cyber-Recovery-Security-Update-for-Multiple-Third-Party-Component-Vulnerabi

Last updated at 14 January, 2020