Dell EMC Alert
2640Warning Date
Severity Level
Warning Number
Target Sector
19 May, 2022
● Medium
2022-4854
All
Dell EMC has released security update to address several vulnerabilities in the following products:
- Dell EMC Enterprise Hybrid Cloud
- Versions before 4.1.2
- PowerProtect DD Appliances model: DD6900, DD9400, DD9900, and DD3300
- 7.0 to 7.7
- 7.8
- PowerProtect DD Appliances model: DD6400
- 7.7
- 7.8
An attacker could exploit these vulnerabilities by doing the following:
- Code injection
- Improper Authentication
The CERT team encourages users to review Dell EMC security advisory and apply the necessary update:
- https://www.dell.com/support/kbdoc/en-us/000199896/dsa-2022-142-dell-emc-enterprise-hybrid-cloud-security-update-for-a-vmware-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000199904/dsa-2022-140-dell-technologies-powerprotect-data-domain-security-update-for-idrac9-vnc-console-authentication-vulnerability