Dell EMC Alert
2636Warning Date
Severity Level
Warning Number
Target Sector
26 June, 2022
● High
2022-5003
All
Dell EMC has released security updates to address several vulnerabilities in the following products:
- iDRAC
- versions before 5.10.30.005.10.30.00
- versions before 2.83.83.83
- OS9
- versions before 9.14.1.129.14.1.12
- versions before 9.14.2.14
- versions prior to 9.14.1.12
Attacker could exploit these vulnerabilities by executing arbitrary code.
The CERT team encourages users to review Dell EMC security advisory and apply the necessary update:
- https://www.dell.com/support/kbdoc/en-us/000200861/dsa-2022-147-dell-emc-powerflex-15g-based-custom-node-14g-based-vxflex-ready-node-and-13g-based-scaleio-ready-node-security-update-for-idrac-based-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000200859/dsa-2022-170-dell-emc-os9-security-update-for-an-openssl-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000200857/dsa-2022-171-dell-emc-os9-security-update-for-openssl-cve-2021-4160-vulnerability-for-mips-processors