Dell EMC Update
3322Warning Date
Severity Level
Warning Number
Target Sector
8 September, 2019
● High
2019-409
All
Description:
Dell EMC has released security updates to address vulnerabilities in the following products:
- Dell EMC Cloud Tiering Appliance 11.0.0.15, 12.0.0.21, 12.0.1.31, 12.1.0.65
- Dell EMC Cloud Tiering Appliance High Availability 11.0.0.15, 12.0.0.21, 12.0.1.31, 12.1.0.65.
- Dell EMC Cloud Tiering Appliance Virtual Edition 11.0.0.15, 12.0.0.21, 12.0.1.31, 12.1.0.65.
- Dell EMC Cloud Tiering Appliance Virtual Edition High Availability11.0.0.15, 12.0.0.21, 12.0.1.31, 12.1.0.65.
- Dell EMC PowerConnect models running firmware versions prior to 5.1.15.2 8024, 7000, M6348, M6220, M8024, M8024-K.
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS) – remotely.
- Escalation of privilege.
- Execute arbitrary code.
- Unauthorized disclosure of information.
- Buffer overflow.
Best practice and Recommendations:
The CERT team encourages users to review Dell EMC security advisory and apply the necessary updates: