Dell EMC Alert
2748Warning Date
Severity Level
Warning Number
Target Sector
27 July, 2022
● Critical
2022-5071
All
DELL EMC has released security updates to address several vulnerabilities in the following products:
- Dell Command | Integration Suite for System Center
- DELL Secure Connect Gateway
- DELL Policy Manager for Secure Connect Gateway
The attacker could exploit the vulnerabilities and do the following:
- Arbitrary File Write
- Open Redirect
- Denial of service attack (DoS)
- Buffer overflow
The CERT team encourages users to review DELL EMC security advisory and apply the necessary updates:
- https://www.dell.com/support/kbdoc/en-us/000201877/dsa-2022-201-dell-command-integration-suite-for-system-center-security-update-for-arbitrary-file-write-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000201854/dsa-2022-173-dell-emc-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000201859/dsa-2022-198-dell-emc-policy-manager-for-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities