DSA-2024-467: Security Update for Dell Connectrix B-Series Component Vulnerabilities

Résumé: Dell Connectrix B-Series remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Cet article concerne Cet article ne concerne pas Cet article n’est associé à aucun produit spécifique. Toutes les versions du produit ne sont pas identifiées dans cet article.
Consulter d’autres ressources

Impact

Critical

Détails

Third-party Component CVEs More Information
weblinker CVE-2024-10403 BSA-2024-2763This hyperlink is taking you to a website outside of Dell Technologies.
SSH CVE-2024-7516 BSA-2024-2742This hyperlink is taking you to a website outside of Dell Technologies.
IPSEC CVE-2024-7517 BSA-2024-2731This hyperlink is taking you to a website outside of Dell Technologies.
Wpa-supplicant CVE-2024-52160 BSA-2024-2730This hyperlink is taking you to a website outside of Dell Technologies.
Linux Kernel CVE-2024-1086 BSA-2024-2603This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSL CVE-2024-4603, CVE-2023-6237, CVE-2023-6129 BSA-2024-2588This hyperlink is taking you to a website outside of Dell Technologies., BSA-2024-2463This hyperlink is taking you to a website outside of Dell Technologies., BSA-2024-2461This hyperlink is taking you to a website outside of Dell Technologies.
Less CVE-2022-48624 BSA-2024-2600This hyperlink is taking you to a website outside of Dell Technologies.
E2fsprogs CVE-2022-1304 BSA-2024-2648This hyperlink is taking you to a website outside of Dell Technologies.
Sqlite CVE-2023-7104 BSA-2024-2608This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recommande à tous les clients de prendre en compte à la fois le score de base CVSS et les scores temporels et environnementaux pertinents qui peuvent avoir un impact sur la gravité potentielle associée à une faille de sécurité donnée.

Produits concernés et mesure corrective

CVEs Addressed Product  Software/Firmware  Affected Versions  Remediated Versions  Link 
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions prior to 8.2.3e2 Version 8.2.3e2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions 9.0.0 through 9.2.0c Version 9.2.0c1 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403. CVE-2024-7517, CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.2.1 through 9.2.1a Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-7516 Connectrix B-Series FOS Versions prior to 9.2.2 Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.0 through 9.2.0b1 Version 9.2.0c or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160 Connectrix B-Series SANnav Versions prior to 2.3.0a Version 2.3.1 or later https://www.dell.com/support/home/product-support/product/connectrix-sannav/drivers
CVEs Addressed Product  Software/Firmware  Affected Versions  Remediated Versions  Link 
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions prior to 8.2.3e2 Version 8.2.3e2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403, CVE-2024-7517 Connectrix B-Series FOS Versions 9.0.0 through 9.2.0c Version 9.2.0c1 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-10403. CVE-2024-7517, CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.2.1 through 9.2.1a Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2024-7516 Connectrix B-Series FOS Versions prior to 9.2.2 Version 9.2.2 or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160, CVE-2024-1086, CVE-2024-4603, CVE-2023-6237, CVE-2023-6129, CVE-2022-48624, CVE-2023-7104, CVE-2022-1304 Connectrix B-Series FOS Versions 9.0 through 9.2.0b1 Version 9.2.0c or later https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview
CVE-2023-52160 Connectrix B-Series SANnav Versions prior to 2.3.0a Version 2.3.1 or later https://www.dell.com/support/home/product-support/product/connectrix-sannav/drivers

Solutions de contournement et mesures d’atténuation

CVE ID Workaround and Mitigation
CVE-2024-7516

Brocade has added a command that allows Brocade Fabric OS switch admins to enable/disable “StrictHostKeyChecking”

Enable strict host key checking using the “sshutil” CLI:

sshutil stricthostkeycheck -value yes

Disable strict host key checking using the “sshutil” CLI:

sshutil stricthostkeycheck -value no

Verify the current configuration using “sshutil” CLI:

sshutil stricthostkeycheck -show

Historique des révisions

RevisionDateDescription
1.02024-12-16Initial Release
2.02024-12-20Updated Remediated Versions for clarity
3.02025-01-17Updated for enhanced format presentation with no changes to content

Informations connexes

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Mention légale

Produits concernés

Connectrix DS-6505B, Connectrix DS-6510B, Connectrix DS-6520B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix DS 6610B, Connectrix DS 6620B, Connectrix ED-DCX6-4B , Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B, Connectrix MP-7810B, Connectrix MP-7840B, Connectrix MP-7850B ...
Propriétés de l’article
Numéro d’article: 000259787
Type d’article: Dell Security Advisory
Dernière modification: 18 Feb 2025
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.