The official site for Saudi CERT
Dell Update
2889
Warning Date
Severity Level
Warning Number
Target Sector
31 March, 2021
● Critical
2021-2697
All
Description:
Dell EMC has released security update to address multiple vulnerabilities in the following product:
- Dell SRM and Dell Storage Monitoring and Reporting (SMR)
- SUSE Linux Binaries
*Only for vApp. - MySQL
- Apache Tomcat
- Apache Struts
- Eclipse Jetty
- SUSE Linux Binaries
- Dell PowerFlex rack kernel-default-base
- vCenter Server
- VMware ESXi
- Embedded OS
- Cisco Nexus
- Dell PowerStore Family
- VMware ESXi 6.7
- Dell PowerFlex Appliance
- vCenter Server
- VMware ESXi
- Embedded OS
- Dell Networking W-Series AirWave Wireless Management Suite
- Aruba Airwave Management System
- Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Solutions Enabler Virtual Appliance, and Dell PowerMax Embedded Management
- Oracle
- Spring Framework
- OpenSSL
- Internet Explorer 11
- Microsoft .NET
- Windows 10
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information
- Buffer Overflow
- Execute arbitrary code remotely
Best practice and Recommendations:
The CERT team encourages users to review Dell EMC security advisory and apply the necessary updates:
- https://www.dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000184747/dsa-2021-065-dell-emc-powerflex-rack-security-update-for-multiple-third-party-component-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000184781/dsa-2021-062-dell-emc-powerstore-family-security-update-for-a-vmware-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000184745/dsa-2021-066-dell-emc-powerflex-appliance-security-update-for-multiple-third-party-component-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000184785/dsa-2021-074
- https://www.dell.com/support/kbdoc/en-us/000184565/dsa-2021-063-dell-emc-unisphere-for-powermax-dell-emc-unisphere-for-powermax-virtual-appliance-dell-emc-solutions-enabler-virtual-appliance-and-dell-emc-powermax-embedded-management-security-update-for-multiple-third-party-component-vulnerabilities
Rate the content
Share the page
