Dell Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Dell EMC PowerScale OneFS70
Dell BIOS56
Dell EMC iDRAC928
Dell Wyse Management Suite26
Dell PowerScale OneFS20

Przeciwdziałanie

Official Fix348
Temporary Fix0
Workaround4
Unavailable8
Not Defined409

Wykorzystywanie

High14
Functional3
Proof-of-Concept37
Unproven5
Not Defined710

Wektor dostępu

Not Defined0
Physical23
Local220
Adjacent18
Network508

Uwierzytelnianie

Not Defined0
High161
Low331
None277

Interakcja z użytkownikiem

Not Defined0
Required112
None657

C3BM Index

CVSSv3 Base

≤10
≤26
≤310
≤445
≤5119
≤6152
≤7199
≤8163
≤953
≤1022

CVSSv3 Temp

≤10
≤26
≤310
≤452
≤5122
≤6168
≤7194
≤8147
≤951
≤1019

VulDB

≤10
≤210
≤338
≤484
≤5152
≤6136
≤7173
≤8121
≤935
≤1020

NVD

≤10
≤20
≤32
≤43
≤533
≤630
≤780
≤8106
≤947
≤1060

CNA

≤10
≤22
≤38
≤49
≤530
≤662
≤776
≤8117
≤955
≤1015

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤61
≤71
≤81
≤92
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k13
<2k16
<5k93
<10k301
<25k334
<50k12
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k306
<2k65
<5k122
<10k195
<25k81
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (286): 2335dn (2), 2355dn (1), Alienware Command Center (1), Alienware Update (6), Alienware m17 R5 BIOS (1), AppSync (4), Asset Manager (1), Avamar (1), Avamar ADMe Web Interface (1), Avamar Server (11), BIOS (56), BIOSConnect (3), BSAFE Crypto-C Micro Edition (11), BSAFE Micro Edition Suite (14), BSAFE SSL-J (2), Client (1), Client Commercial (2), Client Consumer (4), Client Platform (2), CloudLink (10), Cloud Mobility for Dell Storage (2), Command & Update (2), Command Configure (2), Command Integration Suite (1), Command Integration Suite for System Center (1), Command Intel vPro Out of Band (2), Command Monitor (2), Command Update (7), Commercial Platform (3), Consumer Platform (1), Container Storage Modules (4), Crowbar (1), DBUtil BIOS Driver (1), DBUtilDrv2.sys Driver (1), DDOS (1), Data Protection Advisor (7), Data Protection Central (4), Data Protection Search (1), DellSystemLite.Scanner ActiveX control (2), Digital Delivery (4), Display Manager (2), Dock Firmware Update Utilities (1), ECS (4), EMC IsilonSD Edge (1), EMC Metro (1), EMC PowerScale (1), EMC PowerScale OneFS (2), EMC SCG Policy Manager (4), EMC Solutions Enabler (2), EMC Solutions Enabler Virtual Appliance (2), EMC Unisphere for VMAX Virtual Appliance (2), EMC Unity (2), EMC Unity versions (1), EMC VASA Virtual Appliance (2), EMC VASA Virtual Appliances (2), EMC VMAX Embedded Management (4), EMC VxRail (1), ESRS Policy Manager (1), Edge Gateway 5200 (1), Encryption (3), Encryption Enterprise (1), Endpoint Security (1), Endpoint Security Security Suite (1), Endpoint Security Suite (1), Endpoint Security Suite Enterprise (1), Endpoint Security Suite Enterprise (1), Enterprise Copy Data Management (1), Enterprise SONiC OS (3), Enterprise Storage Analytics for vRealize Operations (1), Equallogic Ps4000 (1), G7 17 7790 (1), GeoDrive (6), Governance (7), Hybrid Client (9), IDPA (1), ImageAssist (1), InsightIQ (1), Inspiron 15 7579 2-in-1 BIOS (1), Inspiron 5675 (1), Inspiron 7347 BIOS (1), Inspiron 7352 BIOS (1), Integrated Data Protection Appliance (10), Integrated System for Microsoft Azure Stack Hub (2), Isilion (6), Isilon OneFS (16), IsilonSD Management Server (2), KACE K2000 Systems Deployment Appliance (1), KBOX SM Appliance (6), Kace K1000 Systems Management Appliance (1), Kace K1000 Systems Management Appliance Software (1), Kace K2000 Systems Deployment Appliance (4), Latitude 7202 Rugged Tablet BIOS (1), Lifecycle (4), Multifunction Printer E525w Driver and Software Suite (1), NetVault Backup (2), NetWorker (15), NetWorker AMQP (1), Network Manager (1), Networking OS10 (8), Networking PC5500 (1), Networking S4100 Switch (1), Networking S5200 Switch (1), Networking X-Series (5), OS10 (3), OpenManage Enterprise (9), OpenManage Enterprise-Modular (6), OpenManage Enterprise Modular (1), OpenManage Integration (2), OpenManage Integration for Microsoft System Center (1), OpenManage Network Manager (1), OpenManage Server Administrator (10), Open Manage System Administrator (2), OpenManage Web Server (1), Openmanage CD (1), PPDM (1), PV ME5 (1), Peripheral Manager (1), PowerConnect 3348 (3), PowerConnect 6248P (1), PowerConnect 7000 (1), PowerConnect 8024 (1), PowerConnect M6220 (1), PowerConnect M6348 (1), PowerConnect M8024 (1), PowerConnect M8024-K (1), PowerEdge BIOS (20), PowerEdge MX740c (3), PowerEdge MX840c (3), PowerEdge R640 (3), PowerEdge R740 (3), PowerEdge R740XD (3), PowerEdge R840 (3), PowerEdge R940 (3), PowerEdge R940xa (3), PowerEdge Server BIOS (2), PowerEdge T640 (2), PowerEdge VRTX Switch Module (2), PowerFlex (1), Power Manager (1), PowerMax OS (5), PowerPath Management Appliance (5), PowerPath Management Appliance with (3), PowerProtect Cyber Recovery (3), PowerProtect Data Manager (1), PowerProtect X400 (1), PowerScale Node A200 (1), PowerScale Node F800 (1), PowerScale Node F810 (1), PowerScale Node H400 (1), PowerScale Node H500 (1), PowerScale Node H600 (1), PowerScale Node H5600 (1), PowerScale Node PowerScale Node A2000 (1), PowerScale Nodes (1), PowerScale OneFS (90), PowerStore (16), PowerStore > (1), PowerStore X (1), Powervault Ml6000 (1), Powervault Ml6020 (4), Pre-Boot Authentication Driver (1), Precision 7920 (1), Precision BIOS (18), Precision Optimizer (1), Precision Rack BIOS (1), Product (2), Protected Workspace (1), Quest One Password Manager (1), RSA Archer (11), RSA Authentication Manager (11), RSA BSAFE Crypto-C Micro Edition (1), RSA BSAFE Crypto-J (1), RSA BSAFE Micro Edition Suite (6), RSA BSAFE SSL-J (3), RSA Certificate Manager (1), RSA Identity Governance (4), RSA Identity Lifecycle (2), RSA Identity Management (1), RSA NetWitness Platform (3), RSA Security Analytics (3), RSA Via Lifecycle (4), RSA Web Threat Detection (1), RecoverPoint (6), RecoverPoint for VMs (3), RecoverPoint for Virtual Machines (3), Remote Access Card (1), Reporting (1), Repository Manager (2), Rugged Control Center (1), SCG (1), SMIS (1), SRM (1), SRS Policy Manager (1), SaleIO (1), ScaleIO (2), Secure Connect Gateway (1), Secure Remote Services (3), SecureWorks App (1), Security Management Server (1), SmartFabric (1), Solution Enabler vApp (2), Solutions Enabler Virtual Appliance (1), SonicWALL (1), SonicWALL Email Security (2), SonicWALL GMS (2), SonicWALL NetExtender (1), SonicWALL Scrutinizer (1), SonicWall (5), SonicWall GMS Virtual Appliance (1), SonicWall Scrutinizer (2), SonicWall Secure Remote Access Appliance (1), SonicWall TotalSecure TZ 100 (1), SonicWall ViewPoint (1), Sonicwall Network Security Appliance 2400 (1), Sonicwall Scrutinizer With Flow Analytics Module (4), Sonicwall Universal Management Appliance E5000 (1), SourceOne (1), Storage (1), Storage Manager (3), Storage Monitoring (1), Streaming Data Platform (6), SupportAssist (1), SupportAssist Client (4), SupportAssist Client Commercial (5), SupportAssist Client Consumer (6), SupportAssist Enterprise (1), Support Assist OS Recovery (1), SupportAssist for Business PCs (6), SupportAssist for Home PCs (8), System Update (3), ThinLinux2 (1), TrueMobile 2300 Wireless Broadband Router (1), Truemobile 1300 Wlan Mini-pci Card Util Trayapplet (1), Trusted Device Agent (1), UEFI (1), UEFI BIOS (1), UMA (2), Unisphere for PowerMax (8), Unisphere for PowerMax Virtual Appliance (2), Unisphere for PowerMax vApp (3), Unisphere for Solution Enabler vApp (1), Unisphere for VASA Provider vApp (1), Unisphere for VMAX (2), Unisphere for VMAX Virtual Appliance (1), Unity (15), Unity OE (1), Unity Operating Environment (2), UnityVSA (18), UnityVSA OE (1), Unity XT (11), UnityXT (1), Update (5), Update Package Framework (1), VASA Provider Virtual Appliance (1), VASA Provider vApp (2), VMAX Embedded Management (1), VNX1 (1), VNX2 (5), VNX2 OE for File (5), VNXe3200 (1), VPLEX GeoSynchrony (1), ViPR Controller (1), ViewPoint (2), Virtual Appliances (1), VxRail (1), WES Wyse Device Agent (1), WMS (3), Web Interface (1), Wyse Device Agent (4), Wyse Device Manager (2), Wyse Management Suite (26), Wyse Management Suite Repository (1), Wyse ThinLinux Hagent (1), Wyse ThinOS (6), Wyse Windows Embedded System (1), XPS 13 2-in-1 (1), XPS 13 9370 BIOS (1), XtremIO (2), XtremIO XMS (3), crowbar (1), iDRAC6 (9), iDRAC6 modular (1), iDRAC7 (14), iDRAC8 (22), iDRAC9 (31), iDRAC Service Module (1)

Link to Vendor Website: https://www.dell.com/

OpublikowanoBaseTempSłaby punktProdWykPrzCTIEPSSCVE
2023-05-056.36.3Dell Command Monitor Permissions privilege escalationNieznanyNot DefinedNot Defined0.050.00042CVE-2023-28068
2023-05-045.75.6DELL ECS weak encryptionNieznanyNot DefinedOfficial Fix0.030.00048CVE-2023-25934
2023-04-207.67.6Dell Display Manager Local Privilege EscalationNieznanyNot DefinedNot Defined0.050.00042CVE-2023-28047
2023-04-118.88.8Dell PPDM Privilege EscalationNieznanyNot DefinedNot Defined0.040.00088CVE-2023-28062
2023-04-077.87.8Dell Power Manager privilege escalationNieznanyNot DefinedNot Defined0.040.00043CVE-2023-28051
2023-04-067.47.3Dell Trusted Device Agent privilege escalationNieznanyNot DefinedOfficial Fix0.030.00042CVE-2023-25542
2023-04-066.06.0Dell Display Manager nieznana lukaNieznanyNot DefinedNot Defined0.030.00042CVE-2023-28046
2023-04-056.36.2Dell Streaming Data Platform RedirectNieznanyNot DefinedOfficial Fix0.090.00045CVE-2023-28069
2023-04-047.17.1Dell PowerScale OneFS Link Resolution isi_gather_info privilege escalationNieznanyNot DefinedNot Defined0.040.00042CVE-2023-25940
2023-04-047.87.8Dell PowerScale OneFS privilege escalationNieznanyNot DefinedNot Defined0.020.00042CVE-2023-25941
2023-04-046.56.5Dell PowerScale OneFS denial of serviceNieznanyNot DefinedNot Defined0.030.00044CVE-2023-25942
2023-03-176.86.7Dell EMC Unisphere for PowerMax weak authenticationNieznanyNot DefinedOfficial Fix0.050.00086CVE-2021-21548
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.030.00042CVE-2022-34423
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.040.00042CVE-2022-34422
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.090.00042CVE-2022-34421
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.040.00042CVE-2022-34420
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34419
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34418
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34417
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34416
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34415
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.030.00042CVE-2022-34414
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.040.00042CVE-2022-34413
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34412
2023-03-166.96.9Dell PowerEdge BIOS/Precision BIOS SMM Communication memory corruptionNieznanyNot DefinedNot Defined0.000.00042CVE-2022-34411

744 więcej wpisów nie jest pokazywanych

Want to stay up to date on a daily basis?

Enable the mail alert feature now!