DSA-2021-285: Dell EMC Integrated Data Protection Appliance (PowerProtect DP Series) Security Update for Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228 and CVE-2021-45046)
Summary: Dell EMC Integrated Data Protection Appliance (PowerProtect DP Series) remediation is available for the Apache Log4j Remote Code Execution Vulnerability that may be exploited by malicious users to compromise the affected system. Dell recommends implementing this remediation as soon as possible in light of the critical severity of the vulnerability. ...
Impact
Critical
Details
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228, CVE-2021-45046 | Apache Log4j Remote Code Execution  |
| Third-party Component | CVEs | More information |
| Apache Log4j | CVE-2021-44228, CVE-2021-45046 | Apache Log4j Remote Code Execution |
Affected Products & Remediation
| Product | Affected Versions | Updated Versions | Link to Update |
|---|---|---|---|
| Dell Integrated Data Protection Appliance | 2.7.1 and earlier | 2.7.6 | 4x Appliances: Dell PowerProtect DP Series Appliance 2.7.6 Release Notes for DP4400, DP5xxx, and DP8xxx Log in required to download drivers: https://www.dell.com/support/home/en-us/product-support/product/integrated-data-protection-appliance/drivers 5x and 8x Appliances: Dell PowerProtect DP Series Appliance 2.7.6 Release Notes for DP4400, DP5xxx, and DP8xxx Log in required to download drivers: https://www.dell.com/support/home/en-us/product-support/product/integrated-data-protection-appliance/drivers |
| Product | Affected Versions | Updated Versions | Link to Update |
|---|---|---|---|
| Dell Integrated Data Protection Appliance | 2.7.1 and earlier | 2.7.6 | 4x Appliances: Dell PowerProtect DP Series Appliance 2.7.6 Release Notes for DP4400, DP5xxx, and DP8xxx Log in required to download drivers: https://www.dell.com/support/home/en-us/product-support/product/integrated-data-protection-appliance/drivers 5x and 8x Appliances: Dell PowerProtect DP Series Appliance 2.7.6 Release Notes for DP4400, DP5xxx, and DP8xxx Log in required to download drivers: https://www.dell.com/support/home/en-us/product-support/product/integrated-data-protection-appliance/drivers |
Workarounds & Mitigations
| Product | Affected Versions | Workaround |
| Dell EMC Integrated Data Protection Appliance | 2.7.1 and earlier | PowerProtect DP Series appliance and IDPA: Apache Log4j CVE-2021-44228 |
Related Information
Legal Disclaimer
Affected Products
PowerProtect DP4400, PowerProtect DP5300, PowerProtect DP5800, PowerProtect DP8300, PowerProtect DP8800, PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, PowerProtect Data Protection Hardware
, Integrated Data Protection Appliance Software, PowerProtect DP5900, PowerProtect DP8400, PowerProtect DP8900, Product Security Information
...
Article Properties
Article Number: 000194532
Article Type: Dell Security Advisory
Last Modified: 26 Apr 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000194532
Article Type: Dell Security Advisory
Last Modified: 26 Apr 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.