Artikelnummer: 000208044

DSA-2023-034: Dell Unity, Dell UnityVSA, and Dell Unity XT Security Update for Multiple Vulnerabilities

Samenvatting: Dell Unity, Dell UnityVSA, and Dell Unity XT remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise affected systems.

Article content

Impact

High

Gegevens

Third-party Component	CVEs	CVSS Score	More information
JDK	CVE-2020-14803	5.3	See NVD (http://nvd.nist.gov/) for individual scores for each CVE.
	CVE-2021-2161	5.9
	CVE-2021-2163	5.3
	CVE-2021-2388	7.5
	CVE-2021-2369	4.3
	CVE-2021-2341	3.1
	CVE-2021-35560	7.5
	CVE-2021-35567	6.8
	CVE-2021-35550	5.9
	CVE-2021-35586	5.3
	CVE-2021-35564	5.3
	CVE-2021-35556	5.3
	CVE-2021-35559	5.3
	CVE-2021-35561	5.3
	CVE-2021-35565	5.3
	CVE-2021-35578	5.3
	CVE-2021-35603	3.7
	CVE-2021-35588	3.1
	CVE-2022-21349	5.3
	CVE-2022-21305	5.3
	CVE-2022-21360	5.3
	CVE-2022-21365	5.3
	CVE-2022-21282	5.3
	CVE-2022-21296	5.3
	CVE-2022-21299	5.3
	CVE-2022-21271	5.3
	CVE-2022-21293	5.3
	CVE-2022-21294	5.3
	CVE-2022-21340	5.3
	CVE-2022-21341	5.3
	CVE-2022-21248	3.7
	CVE-2022-21476	7.5
	CVE-2022-21426	5.3
	CVE-2022-21496	5.3
	CVE-2022-21434	5.3
	CVE-2022-21443	3.7
libtirpc/rpcbind	CVE-2021-46828	7.5
Oxygen WebHelp	CVE-2021-46827	6.1

Third-party Component	CVEs	CVSS Score	More information
JDK	CVE-2020-14803	5.3	See NVD (http://nvd.nist.gov/) for individual scores for each CVE.
	CVE-2021-2161	5.9
	CVE-2021-2163	5.3
	CVE-2021-2388	7.5
	CVE-2021-2369	4.3
	CVE-2021-2341	3.1
	CVE-2021-35560	7.5
	CVE-2021-35567	6.8
	CVE-2021-35550	5.9
	CVE-2021-35586	5.3
	CVE-2021-35564	5.3
	CVE-2021-35556	5.3
	CVE-2021-35559	5.3
	CVE-2021-35561	5.3
	CVE-2021-35565	5.3
	CVE-2021-35578	5.3
	CVE-2021-35603	3.7
	CVE-2021-35588	3.1
	CVE-2022-21349	5.3
	CVE-2022-21305	5.3
	CVE-2022-21360	5.3
	CVE-2022-21365	5.3
	CVE-2022-21282	5.3
	CVE-2022-21296	5.3
	CVE-2022-21299	5.3
	CVE-2022-21271	5.3
	CVE-2022-21293	5.3
	CVE-2022-21294	5.3
	CVE-2022-21340	5.3
	CVE-2022-21341	5.3
	CVE-2022-21248	3.7
	CVE-2022-21476	7.5
	CVE-2022-21426	5.3
	CVE-2022-21496	5.3
	CVE-2022-21434	5.3
	CVE-2022-21443	3.7
libtirpc/rpcbind	CVE-2021-46828	7.5
Oxygen WebHelp	CVE-2021-46827	6.1

Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

CVEs Addressed	Product	Affected Versions	Updated Versions	Link to Update
All the above	Dell Unity Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004	https://www.dell.com/support/home/en-us/product-support/product/unity-all-flash-family/drivers
	Dell Unity Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004
All the above	Dell UnityVSA Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004	https://www.dell.com/support/home/en-us/product-support/product/unity-all-flash-family/drivers
	Dell UnityVSA Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004
All the above	Dell Unity XT Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004	https://www.dell.com/support/home/en-us/product-support/product/unity-all-flash-family/drivers

CVEs Addressed	Product	Affected Versions	Updated Versions	Link to Update
All the above	Dell Unity Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004	https://www.dell.com/support/home/en-us/product-support/product/unity-all-flash-family/drivers
	Dell Unity Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004
All the above	Dell UnityVSA Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004	https://www.dell.com/support/home/en-us/product-support/product/unity-all-flash-family/drivers
	Dell UnityVSA Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004
All the above	Dell Unity XT Operating Environment (OE)	Versions prior to 5.2.2.0.5.004	5.2.2.0.5.004	https://www.dell.com/support/home/en-us/product-support/product/unity-all-flash-family/drivers

Revisiegeschiedenis

Revision	Date	Description
1.0	2023-01-30	Initial Release
1.1	2023-03-24	Reformatted for improved presentation without any changes to content.

Verwante informatie

Juridische informatie

Artikeleigenschappen

Getroffen product

Dell EMC Unity, Product Security Information, Dell Unity 300, Dell EMC Unity 300F, Dell EMC Unity 350F, Dell EMC Unity XT 380, Dell EMC Unity XT 380F, Dell EMC Unity 400, Dell EMC Unity 400F, Dell EMC Unity 450F, Dell EMC Unity XT 480 , Dell EMC Unity XT 480F, Dell EMC Unity 500, Dell EMC Unity 500F, Dell EMC Unity 550F, Dell EMC Unity 600, Dell EMC Unity 600F, Dell EMC Unity 650F, Dell EMC Unity XT 680, Dell EMC Unity XT 680F, Dell EMC Unity XT 880, Dell EMC Unity XT 880F, Unity All Flash, Dell EMC Unity Family |Dell EMC Unity All Flash, Dell EMC Unity Family, Dell EMC Unity Hybrid, Unity Hybrid flash, UnityVSA, Dell EMC UnityVSA Professional Edition/Unity Cloud Edition ...

Datum laatst gepubliceerd

24 mrt. 2023

Artikeltype

Dell Security Advisory

Terug naar boven

Welkom

Welkom bij Dell