Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

DSA-2022-261: Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR) Security Update for Multiple Third-Party Component Vulnerabilities

Summary: Multiple components within Dell EMC SRM and Dell EMC SMR require a security update to address various vulnerabilities.

This article applies to   This article does not apply to 

Impact

Critical

Details

Component CVE(s) More information (check for below links for individual scores for each CVE)
SUSE
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
CVE-2015-20107 https://www.suse.com/security/cve/CVE-2015-20107.html
CVE-2017-16932 https://www.suse.com/security/cve/CVE-2017-16932.html
CVE-2018-7755 https://www.suse.com/security/cve/CVE-2018-7755.html
CVE-2019-19377 https://www.suse.com/security/cve/CVE-2019-19377.html
CVE-2019-20811 https://www.suse.com/security/cve/CVE-2019-20811.html
CVE-2020-36557 https://www.suse.com/security/cve/CVE-2020-36557.html
CVE-2020-36558 https://www.suse.com/security/cve/CVE-2020-36558.html
CVE-2021-3695 https://www.suse.com/security/cve/CVE-2021-3695.html
CVE-2021-3696 https://www.suse.com/security/cve/CVE-2021-3696.html
CVE-2021-3697 https://www.suse.com/security/cve/CVE-2021-3697.html
CVE-2021-20292 https://www.suse.com/security/cve/CVE-2021-20292.html
CVE-2021-20321 https://www.suse.com/security/cve/CVE-2021-20321.html
CVE-2021-33061 https://www.suse.com/security/cve/CVE-2021-33061.html
CVE-2021-33655 https://www.suse.com/security/cve/CVE-2021-33655.html
CVE-2021-33656 https://www.suse.com/security/cve/CVE-2021-33656.html
CVE-2021-38208 https://www.suse.com/security/cve/CVE-2021-38208.html
CVE-2021-39711 https://www.suse.com/security/cve/CVE-2021-39711.html
CVE-2021-43389 https://www.suse.com/security/cve/CVE-2021-43389.html
CVE-2021-43527 https://www.suse.com/security/cve/CVE-2021-43527.html
CVE-2022-1011 https://www.suse.com/security/cve/CVE-2022-1011.html
CVE-2022-1184 https://www.suse.com/security/cve/CVE-2022-1184.html
CVE-2022-1280 https://www.suse.com/security/cve/CVE-2022-1280.html
CVE-2022-1292 https://www.suse.com/security/cve/CVE-2022-1292.html
CVE-2022-1304 https://www.suse.com/security/cve/CVE-2022-1304.html
CVE-2022-1353 https://www.suse.com/security/cve/CVE-2022-1353.html
CVE-2022-1419 https://www.suse.com/security/cve/CVE-2022-1419.html
CVE-2022-1516 https://www.suse.com/security/cve/CVE-2022-1516.html
CVE-2022-1586 https://www.suse.com/security/cve/CVE-2022-1586.html
CVE-2022-1587 https://www.suse.com/security/cve/CVE-2022-1587.html
CVE-2022-1652 https://www.suse.com/security/cve/CVE-2022-1652.html
CVE-2022-1729 https://www.suse.com/security/cve/CVE-2022-1729.html
CVE-2022-1734 https://www.suse.com/security/cve/CVE-2022-1734.html
CVE-2022-1966 https://www.suse.com/security/cve/CVE-2022-1966.html
CVE-2022-1974 https://www.suse.com/security/cve/CVE-2022-1974.html
CVE-2022-1975 https://www.suse.com/security/cve/CVE-2022-1975.html
CVE-2022-2068 https://www.suse.com/security/cve/CVE-2022-2068.html
CVE-2022-21123 https://www.suse.com/security/cve/CVE-2022-21123.html
CVE-2022-21125 https://www.suse.com/security/cve/CVE-2022-21125.html
CVE-2022-21127 https://www.suse.com/security/cve/CVE-2022-21127.html
CVE-2022-21166 https://www.suse.com/security/cve/CVE-2022-21166.html
CVE-2022-21180 https://www.suse.com/security/cve/CVE-2022-21180.html
CVE-2022-21499 https://www.suse.com/security/cve/CVE-2022-21499.html
CVE-2022-22576 https://www.suse.com/security/cve/CVE-2022-22576.html
CVE-2022-24903 https://www.suse.com/security/cve/CVE-2022-24903.html
CVE-2022-27776 https://www.suse.com/security/cve/CVE-2022-27776.html
CVE-2022-27781 https://www.suse.com/security/cve/CVE-2022-27781.html
CVE-2022-27782 https://www.suse.com/security/cve/CVE-2022-27782.html
CVE-2022-28356 https://www.suse.com/security/cve/CVE-2022-28356.html
CVE-2022-28733 https://www.suse.com/security/cve/CVE-2022-28733.html
CVE-2022-28734 https://www.suse.com/security/cve/CVE-2022-28734.html
CVE-2022-28736 https://www.suse.com/security/cve/CVE-2022-28736.html
CVE-2022-28748 https://www.suse.com/security/cve/CVE-2022-28748.html
CVE-2022-29155 https://www.suse.com/security/cve/CVE-2022-29155.html
CVE-2022-29187 https://www.suse.com/security/cve/CVE-2022-29187.html
CVE-2022-29824 https://www.suse.com/security/cve/CVE-2022-29824.html
CVE-2022-30594 https://www.suse.com/security/cve/CVE-2022-30594.html
CVE-2022-36946 https://www.suse.com/security/cve/CVE-2022-36946.html
Java
 
 
 
 
 
 
CVE-2022-21496 https://nvd.nist.gov/vuln/detail/CVE-2022-21496
CVE-2022-21434 https://nvd.nist.gov/vuln/detail/CVE-2022-21434
CVE-2022-21426 https://nvd.nist.gov/vuln/detail/CVE-2022-21426
CVE-2022-21476 https://nvd.nist.gov/vuln/detail/CVE-2022-21476
CVE-2022-21540 https://nvd.nist.gov/vuln/detail/CVE-2022-21540
CVE-2022-21541 https://nvd.nist.gov/vuln/detail/CVE-2022-21541
CVE-2022-34169 https://nvd.nist.gov/vuln/detail/CVE-2022-34169
Mysql
 
 
 
 
 
 
 
 
 
CVE-2022-21427 https://nvd.nist.gov/vuln/detail/CVE-2022-21427
CVE-2022-21417 https://nvd.nist.gov/vuln/detail/CVE-2022-21417
CVE-2022-21454 https://nvd.nist.gov/vuln/detail/CVE-2022-21454
CVE-2022-21451 https://nvd.nist.gov/vuln/detail/CVE-2022-21451
CVE-2022-21444 https://nvd.nist.gov/vuln/detail/CVE-2022-21444
CVE-2022-21460 https://nvd.nist.gov/vuln/detail/CVE-2022-21460
CVE-2022-21515 https://nvd.nist.gov/vuln/detail/CVE-2022-21515
CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032
CVE-2022-27778 https://nvd.nist.gov/vuln/detail/CVE-2022-27778
CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292
Tomcat
 
CVE-2022-29885 https://nvd.nist.gov/vuln/detail/CVE-2022-29885
CVE-2022-34305 https://nvd.nist.gov/vuln/detail/CVE-2022-34305
Emedded Service Enabler
CVE-2022-0778
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
Component CVE(s) More information (check for below links for individual scores for each CVE)
SUSE
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
CVE-2015-20107 https://www.suse.com/security/cve/CVE-2015-20107.html
CVE-2017-16932 https://www.suse.com/security/cve/CVE-2017-16932.html
CVE-2018-7755 https://www.suse.com/security/cve/CVE-2018-7755.html
CVE-2019-19377 https://www.suse.com/security/cve/CVE-2019-19377.html
CVE-2019-20811 https://www.suse.com/security/cve/CVE-2019-20811.html
CVE-2020-36557 https://www.suse.com/security/cve/CVE-2020-36557.html
CVE-2020-36558 https://www.suse.com/security/cve/CVE-2020-36558.html
CVE-2021-3695 https://www.suse.com/security/cve/CVE-2021-3695.html
CVE-2021-3696 https://www.suse.com/security/cve/CVE-2021-3696.html
CVE-2021-3697 https://www.suse.com/security/cve/CVE-2021-3697.html
CVE-2021-20292 https://www.suse.com/security/cve/CVE-2021-20292.html
CVE-2021-20321 https://www.suse.com/security/cve/CVE-2021-20321.html
CVE-2021-33061 https://www.suse.com/security/cve/CVE-2021-33061.html
CVE-2021-33655 https://www.suse.com/security/cve/CVE-2021-33655.html
CVE-2021-33656 https://www.suse.com/security/cve/CVE-2021-33656.html
CVE-2021-38208 https://www.suse.com/security/cve/CVE-2021-38208.html
CVE-2021-39711 https://www.suse.com/security/cve/CVE-2021-39711.html
CVE-2021-43389 https://www.suse.com/security/cve/CVE-2021-43389.html
CVE-2021-43527 https://www.suse.com/security/cve/CVE-2021-43527.html
CVE-2022-1011 https://www.suse.com/security/cve/CVE-2022-1011.html
CVE-2022-1184 https://www.suse.com/security/cve/CVE-2022-1184.html
CVE-2022-1280 https://www.suse.com/security/cve/CVE-2022-1280.html
CVE-2022-1292 https://www.suse.com/security/cve/CVE-2022-1292.html
CVE-2022-1304 https://www.suse.com/security/cve/CVE-2022-1304.html
CVE-2022-1353 https://www.suse.com/security/cve/CVE-2022-1353.html
CVE-2022-1419 https://www.suse.com/security/cve/CVE-2022-1419.html
CVE-2022-1516 https://www.suse.com/security/cve/CVE-2022-1516.html
CVE-2022-1586 https://www.suse.com/security/cve/CVE-2022-1586.html
CVE-2022-1587 https://www.suse.com/security/cve/CVE-2022-1587.html
CVE-2022-1652 https://www.suse.com/security/cve/CVE-2022-1652.html
CVE-2022-1729 https://www.suse.com/security/cve/CVE-2022-1729.html
CVE-2022-1734 https://www.suse.com/security/cve/CVE-2022-1734.html
CVE-2022-1966 https://www.suse.com/security/cve/CVE-2022-1966.html
CVE-2022-1974 https://www.suse.com/security/cve/CVE-2022-1974.html
CVE-2022-1975 https://www.suse.com/security/cve/CVE-2022-1975.html
CVE-2022-2068 https://www.suse.com/security/cve/CVE-2022-2068.html
CVE-2022-21123 https://www.suse.com/security/cve/CVE-2022-21123.html
CVE-2022-21125 https://www.suse.com/security/cve/CVE-2022-21125.html
CVE-2022-21127 https://www.suse.com/security/cve/CVE-2022-21127.html
CVE-2022-21166 https://www.suse.com/security/cve/CVE-2022-21166.html
CVE-2022-21180 https://www.suse.com/security/cve/CVE-2022-21180.html
CVE-2022-21499 https://www.suse.com/security/cve/CVE-2022-21499.html
CVE-2022-22576 https://www.suse.com/security/cve/CVE-2022-22576.html
CVE-2022-24903 https://www.suse.com/security/cve/CVE-2022-24903.html
CVE-2022-27776 https://www.suse.com/security/cve/CVE-2022-27776.html
CVE-2022-27781 https://www.suse.com/security/cve/CVE-2022-27781.html
CVE-2022-27782 https://www.suse.com/security/cve/CVE-2022-27782.html
CVE-2022-28356 https://www.suse.com/security/cve/CVE-2022-28356.html
CVE-2022-28733 https://www.suse.com/security/cve/CVE-2022-28733.html
CVE-2022-28734 https://www.suse.com/security/cve/CVE-2022-28734.html
CVE-2022-28736 https://www.suse.com/security/cve/CVE-2022-28736.html
CVE-2022-28748 https://www.suse.com/security/cve/CVE-2022-28748.html
CVE-2022-29155 https://www.suse.com/security/cve/CVE-2022-29155.html
CVE-2022-29187 https://www.suse.com/security/cve/CVE-2022-29187.html
CVE-2022-29824 https://www.suse.com/security/cve/CVE-2022-29824.html
CVE-2022-30594 https://www.suse.com/security/cve/CVE-2022-30594.html
CVE-2022-36946 https://www.suse.com/security/cve/CVE-2022-36946.html
Java
 
 
 
 
 
 
CVE-2022-21496 https://nvd.nist.gov/vuln/detail/CVE-2022-21496
CVE-2022-21434 https://nvd.nist.gov/vuln/detail/CVE-2022-21434
CVE-2022-21426 https://nvd.nist.gov/vuln/detail/CVE-2022-21426
CVE-2022-21476 https://nvd.nist.gov/vuln/detail/CVE-2022-21476
CVE-2022-21540 https://nvd.nist.gov/vuln/detail/CVE-2022-21540
CVE-2022-21541 https://nvd.nist.gov/vuln/detail/CVE-2022-21541
CVE-2022-34169 https://nvd.nist.gov/vuln/detail/CVE-2022-34169
Mysql
 
 
 
 
 
 
 
 
 
CVE-2022-21427 https://nvd.nist.gov/vuln/detail/CVE-2022-21427
CVE-2022-21417 https://nvd.nist.gov/vuln/detail/CVE-2022-21417
CVE-2022-21454 https://nvd.nist.gov/vuln/detail/CVE-2022-21454
CVE-2022-21451 https://nvd.nist.gov/vuln/detail/CVE-2022-21451
CVE-2022-21444 https://nvd.nist.gov/vuln/detail/CVE-2022-21444
CVE-2022-21460 https://nvd.nist.gov/vuln/detail/CVE-2022-21460
CVE-2022-21515 https://nvd.nist.gov/vuln/detail/CVE-2022-21515
CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032
CVE-2022-27778 https://nvd.nist.gov/vuln/detail/CVE-2022-27778
CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292
Tomcat
 
CVE-2022-29885 https://nvd.nist.gov/vuln/detail/CVE-2022-29885
CVE-2022-34305 https://nvd.nist.gov/vuln/detail/CVE-2022-34305
Emedded Service Enabler
CVE-2022-0778
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Affected Version(s) Updated Version(s) Link to Update  
Dell EMC SRM Versions prior to 4.8.0.0
 
4.8.0.0 https://support.emc.com/downloads/34247_SRM
 
 
 
Dell EMC SRM Vapp Versions prior to 4.8.0.0
 
4.8.0.0 https://support.emc.com/downloads/34247_SRM
 
 
Dell EMC SMR Versions prior to 4.8.0.0 4.8.0.0 https://support.emc.com/downloads/40532_SMR  
Dell EMC SMR Vapp Versions prior to 4.8.0.0 4.8.0.0 https://support.emc.com/downloads/40532_SMR  
 
Product Affected Version(s) Updated Version(s) Link to Update  
Dell EMC SRM Versions prior to 4.8.0.0
 
4.8.0.0 https://support.emc.com/downloads/34247_SRM
 
 
 
Dell EMC SRM Vapp Versions prior to 4.8.0.0
 
4.8.0.0 https://support.emc.com/downloads/34247_SRM
 
 
Dell EMC SMR Versions prior to 4.8.0.0 4.8.0.0 https://support.emc.com/downloads/40532_SMR  
Dell EMC SMR Vapp Versions prior to 4.8.0.0 4.8.0.0 https://support.emc.com/downloads/40532_SMR  
 

Workarounds & Mitigations

None.

Revision History

RevisionDateDescription
1.02022-10-05Initial Release

Related Information

Affected Products

Product Security Information
Article Properties
Article Number: 000203996
Article Type: Dell Security Advisory
Last Modified: 12 Oct 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000203996
Article Type: Dell Security Advisory
Last Modified: 12 Oct 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.