Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

DSA-2023-108: Dell Unisphere for PowerMax, Dell Unisphere for PowerMax vApp, Dell Solutions Enabler vApp, Dell Unisphere 360, Dell VASA Provider vApp, and Dell PowerMax EMB Mgmt Security Update for Multiple Vulnerabilities

Summary: Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Solutions Enabler, Dell Solutions Enabler Virtual Appliance, Dell Unisphere 360, Dell VASA Provider Virtual Appliance, and Dell PowerMax Embedded Management remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. ...

This article applies to   This article does not apply to 

Impact

Medium

Details

Third-party Component CVEs More Information
Grub2 CVE-2022-2601, CVE-2022-3775 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
SLES 12 SP5 (9.2.4.1) CVE-2015-8985, CVE-2016-3709, CVE-2019-17571, CVE-2019-2708, CVE-2020-9488, CVE-2021-20266, CVE-2021-20271, CVE-2021-3421, CVE-2021-4104, CVE-2021-46828, CVE-2021-46848, CVE-2022-23302, CVE-2022-23305, CVE-2022-23307, CVE-2022-2601, CVE-2022-32221, CVE-2022-3554, CVE-2022-3555, CVE-2022-3570, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626, CVE-2022-3627, CVE-2022-3775, CVE-2022-3821, CVE-2022-3970, CVE-2022-40303, CVE-2022-40304, CVE-2022-41973, CVE-2022-41974, CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-42898, CVE-2022-43552, CVE-2022-43680, CVE-2022-43995, CVE-2022-4415, CVE-2022-44638, CVE-2022-44792, CVE-2022-44793, CVE-2022-46908, CVE-2022-47629, CVE-2022-4378, CVE-2022-42328, CVE-2022-42329, CVE-2022-3643, CVE-2022-3635, CVE-2022-41850, CVE-2022-45934, CVE-2022-3628, CVE-2022-3567, CVE-2022-41858, CVE-2022-43945, CVE-2022-4095, CVE-2022-3903, CVE-2022-42895, CVE-2022-42896 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Oracle CVE-2022-43548, CVE-2023-21835, CVE-2023-21830, CVE-2023-21843 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Windows 10 CVE-2023-21712, CVE-2023-21774, CVE-2023-21525, CVE-2023-21767, CVE-2023-21765, CVE-2023-21748, CVE-2023-21757, CVE-2023-21752, CVE-2023-21755, CVE-2023-21766, CVE-2023-21772, CVE-2023-21750, CVE-2023-21524, CVE-2023-21760, CVE-2023-21754, CVE-2023-21747, CVE-2023-21776, CVE-2023-21773, CVE-2023-21758, CVE-2023-21753, CVE-2023-21749, CVE-2023-21746, CVE-2023-21739, CVE-2023-21732, CVE-2023-21730, CVE-2023-21728, CVE-2023-21726, CVE-2023-21683, CVE-2023-21682, CVE-2023-21681, CVE-2023-21680, CVE-2023-21679, CVE-2023-21678, CVE-2023-21677, CVE-2023-21676, CVE-2023-21675, CVE-2023-21674, CVE-2023-21563, CVE-2023-21561, CVE-2023-21560, CVE-2023-21559, CVE-2023-21558, CVE-2023-21557, CVE-2023-21556, CVE-2023-21555, CVE-2023-21552, CVE-2023-21551, CVE-2023-21550, CVE-2023-21549, CVE-2023-21548, CVE-2023-21543, CVE-2023-21541, CVE-2023-21540, CVE-2023-21547, CVE-2023-21546, CVE-2023-21537, CVE-2023-21536, CVE-2023-21535, CVE-2023-21532, CVE-2023-21527, CVE-2022-41076, CVE-2022-44707, CVE-2022-44698, CVE-2022-44697, CVE-2022-44689, CVE-2022-44683, CVE-2022-44681, CVE-2022-44680, CVE-2022-44679, CVE-2022-44678, CVE-2022-44677, CVE-2022-44676, CVE-2022-44675, CVE-2022-44674, CVE-2022-44673, CVE-2022-44671, CVE-2022-44670, CVE-2022-44669, CVE-2022-44668, CVE-2022-44667, CVE-2022-44666, CVE-2022-41121, CVE-2022-41077, CVE-2022-41074, CVE-2022-41045, CVE-2022-41109, CVE-2022-41039, CVE-2022-41100, CVE-2022-41099, CVE-2022-41098, CVE-2022-41097, CVE-2022-41096, CVE-2022-41095, CVE-2022-41093, CVE-2022-41090, CVE-2022-41088, CVE-2022-41086, CVE-2022-41058, CVE-2022-41057, CVE-2022-41056, CVE-2022-41055, CVE-2022-41053, CVE-2022-41052, CVE-2022-41047, CVE-2022-41048, CVE-2022-37992, CVE-2022-23824, CVE-2022-41128, CVE-2022-41125, CVE-2022-41118, CVE-2022-41073, CVE-2022-41054, CVE-2022-41113, CVE-2022-41102, CVE-2022-41101, CVE-2022-41050, CVE-2022-41049, CVE-2022-41091 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Software/Firmware Affected Versions Remediated Versions Link
Unisphere for PowerMax Host Installation Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
Unisphere for PowerMax Virtual Appliance Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
Unisphere for PowerMax EEM Versions prior to 9.2.4.1 Version 9.2.4.29 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
Unisphere 360 Host Installation Versions prior to 9.2.4.4 Version 9.2.4.4 or later https://www.dell.com/support/home/product-support/product/unisphere-360/drivers
Solutions Enabler Host Installation Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
Solutions Enabler EEM Versions prior to 9.2.4.1 Version 9.2.4.29 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
Solutions Enabler Virtual Appliance Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
eVASA Provider Virtual Appliance Versions prior to 9.2.4.22 Version 9.2.4.22 or later https://www.dell.com/support/home/product-support/product/vasa-provider/drivers
VASA Provider Standalone Versions prior to 9.2.4.26 Version 9.2.4.26 or later https://www.dell.com/support/home/product-support/product/vasa-provider/drivers
PowerMaxOS 5978 PowerMax OS 5978 Version 5978 or later Contact customer support and request DSA-2023-108
Product Software/Firmware Affected Versions Remediated Versions Link
Unisphere for PowerMax Host Installation Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
Unisphere for PowerMax Virtual Appliance Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
Unisphere for PowerMax EEM Versions prior to 9.2.4.1 Version 9.2.4.29 or later https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers
Unisphere 360 Host Installation Versions prior to 9.2.4.4 Version 9.2.4.4 or later https://www.dell.com/support/home/product-support/product/unisphere-360/drivers
Solutions Enabler Host Installation Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
Solutions Enabler EEM Versions prior to 9.2.4.1 Version 9.2.4.29 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
Solutions Enabler Virtual Appliance Versions prior to 9.2.4.1 Version 9.2.4.1 or later https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers
eVASA Provider Virtual Appliance Versions prior to 9.2.4.22 Version 9.2.4.22 or later https://www.dell.com/support/home/product-support/product/vasa-provider/drivers
VASA Provider Standalone Versions prior to 9.2.4.26 Version 9.2.4.26 or later https://www.dell.com/support/home/product-support/product/vasa-provider/drivers
PowerMaxOS 5978 PowerMax OS 5978 Version 5978 or later Contact customer support and request DSA-2023-108

Workarounds & Mitigations

None.

Revision History

RevisionDateDescription
1.02023-3-29Initial Version
2.02023-06-02Updated for enhanced presentation with no change to content.
3.02023-09-01Updated for enhanced presentation with no change to content.
4.02023-12-01Updated for enhanced presentation with no change to content.
5.02024-03-08Modified some wording to indicate remediated version(s) and later are carrying the fix

Acknowledgements

None.

Related Information

Affected Products

PowerMax, PowerMax, PowerMax 2000, PowerMax 2500, PowerMax 8000, PowerMaxOS 5978, Unisphere 360, Unisphere for PowerMax, VASA Provider
Article Properties
Article Number: 000211832
Article Type: Dell Security Advisory
Last Modified: 08 Mar 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000211832
Article Type: Dell Security Advisory
Last Modified: 08 Mar 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.