Some article numbers may have changed. If this isn't what you're looking for, try searching all articles. Search articles
DSA-2021-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Summary:Dell PowerEdge VRTX remediation is available for a weak password encryption vulnerability that may be exploited by malicious users to compromise the affected system.
Please select a product to check article relevancy
This article applies to This article does not apply toThis article is not tied to any specific product.Not all product versions are identified in this article.
Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.
Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
Affected Products & Remediation
Product
Affected Versions
Updated Versions
Link to Update
Dell PowerEdge VRTX
VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82