Dell, HP, and Lenovo Devices Found Using Outdated OpenSSL Versions

An analysis of firmware images across devices from Dell, HP, and Lenovo has revealed the presence of outdated versions of the OpenSSL cryptographic library, underscoring a supply chain risk. EFI Development Kit, aka EDK, is an open source implementation of the Unified Extensible Firmware Interfac...

Dell PowerPath Management Appliance has an unspecified vulnerability

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance.Dell PowerPath Management Appliance has a security vulnerability for which no information is available...

Dell PowerPath Management Appliance 安全漏洞

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance. The Dell PowerPath Management Appliance is vulnerable to a sensitive information disclosure vulnerability th...

Dell PowerPath Management Appliance 信任管理问题漏洞

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance. A security vulnerability exists in the Dell PowerPath Management Appliance version 3.3, all versions 3.2,...

Dell PowerPath Management Appliance 操作系统命令注入漏洞

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. A command injection vulnerability exists in Dell PowerPath Management Appliance versions 3.3, 3.2, 3.1,...

Dell PowerPath Management Appliance 安全漏洞

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. An elevation of privilege vulnerability exists in Dell PowerPath Management Appliance version 3.3, whic...

Dell PowerPath Management Appliance 安全漏洞

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance. dell PowerPath Management Appliance Licensing Issues Vulnerability. An attacker could use this vulnerability...

Dell EMC iDRAC9 < 6.00.30.00 (DSA-2022-265)

The version of Dell EMC iDRAC9 installed on the remote host is prior to 6.00.30.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-265 advisory. - Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware...

Dell EMC iDRAC8 < 2.84.84.84 (DSA-2022-265)

The version of Dell EMC iDRAC8 installed on the remote host is prior to 2.84.84.84. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-265 advisory. - Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware...

PT-2022-6351 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. A local malicious user could potentially explo...

Dell Client BIOS Improper Input Validation (DSA-2022-249)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by an improper input validation vulnerability. A local, authenticated attacker can exploit this vulnerability by using an SMI to execute arbitrary code in the SMRAM. Please see the included Dell Security...

PT-2022-6348 · Dell Emc · Dell Emc Scg Policy Manager

Name of the Vulnerable Software and Affected Versions: Dell EMC SCG Policy Manager versions 5.10 through 5.12 Description: The issue is related to a Hard-coded Cryptographic Key, which could allow an attacker with knowledge of the hard-coded sensitive information to potentially exploit this...

PT-2022-6324 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to a weak encoding for a NDMP password in Dell PowerScale OneFS. A malicious and privileged local attacker could potentially exploit this, leading to a full...

Dell ELAN Miniport Touchpad Driver 安全漏洞

Dell ELAN Miniport Touchpad Driver is a miniport touchpad driver from Dell USA. A security vulnerability exists in Dell ELAN Miniport Touchpad Driver versions prior to 24.21.51.2. An attacker could exploit this vulnerability to cause a system crash by sending a certain IOCTL request...

Dell Wyse Management Suite < 3.7 Multiple Vulnerabilities (DSA-2022-143)

The version of Dell Wyse Management Suite installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-143 advisory. - jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of t...

PT-2022-6350 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a stack-based buffer overflow in Dell BIOS. A local authenticated malicious user may exploit this by sending larger than expected input to a parameter using an SMI...

PT-2022-6372 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an improper input validation vulnerability in Dell BIOS. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain...

The vulnerability of the Cloud Mobility for Dell Storage data storage system, related to incorrect authorization, allows a perpetrator to gain access to protected information.

The vulnerability of the Cloud Mobility for Dell Storage storage system is related to incorrect authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12628)

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS has a security vulnerability that stems from its failure to properly configure resource allocation limits or throttling, which could b...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12629)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS has a security vulnerability that stems from the inclusion of a privileged context switch error, which could be exploited by an attacker to compromise the entire system...