Dell VxRail 7.0 Security Bulletin: Patching Multiple Third-Party CVEs Including CVE-2024-37085

Vulnerability Overview Title: DSA-2024-247: Security Update for Dell VxRail 7.0.520 Multiple Third-Party Component Vulnerabilities Summary: Dell VxRail has addressed multiple security vulnerabilities that could potentially be exploited by malicious actors to impact affected systems. Impact Scope Affected Product: Dell EMC VxRail Appliance Affected Versions: Version 7.0.x prior to 7.0.520 Third-Party Components: - VMware: CVE-2024-22273, CVE-2024-22274, CVE-2024-22275 - VMware: CVE-2024-37085, CVE-2024-37088, CVE-2024-37087 - SUSE: CVE-2024-2961, CVE-2024-28757, CVE-2024-28182, CVE-2024-28085, CVE-2024-26400, CVE-2024-26461, CVE-2024-26458, CVE-2024-25743, CVE-2024-25742, CVE-2024-24549, CVE-2024-2398, CVE-2024-23672, CVE-2024-21094, CVE-2024-21085, CVE-2024-21068, CVE-2024-21012, CVE-2024-21011, CVE-2024-2004, CVE-2024-0450, CVE-2023-6597, CVE-2023-6536, CVE-2023-6535, CVE-2023-6356, CVE-2023-5388, CVE-2023-53821, CVE-2023-52605, CVE-2023-52597, CVE-2023-52583, CVE-2023-52582, CVE-2023-52576, CVE-2023-52575, CVE-2023-52574, CVE-2023-52569, CVE-2023-52567, CVE-2023-52566, CVE-2023-52564, CVE-2023-52532, CVE-2023-52529, CVE-2023-52528, CVE-2023-52525, CVE-2023-52524, CVE-2023-52523, CVE-2023-52520, CVE-2023-52519, CVE-2023-52517, CVE-2023-52515, CVE-2023-52513, CVE-2023-52511, CVE-2023-52510, CVE-2023-52509, CVE-2023-52508, CVE-2023-52507, CVE-2023-52504, CVE-2023-52502, CVE-2023-52501, CVE-2023-52497, CVE-2023-52492, CVE-2023-52477, CVE-2023-52474, CVE-2023-52470, CVE-2023-52469, CVE-2023-52454, CVE-2023-52450, CVE-2023-52447, CVE-2023-52425, CVE-2023-40551, CVE-2023-40550, CVE-2023-40549, CVE-2023-40548, CVE-2023-40547, CVE-2023-40546, CVE-2023-35827, CVE-2023-28746, CVE-2022-48630, CVE-2022-48629, CVE-2022-48626, CVE-2022-48624, CVE-2022-4744, CVE-2022-28737, CVE-2022-20154, CVE-2021-47108, CVE-2021-47107, CVE-2021-47105, CVE-2021-47104, CVE-2021-47102, CVE-2021-47101, CVE-2021-47100, CVE-2021-47099, CVE-2021-47098, CVE-2021-47097, CVE-2021-47096, CVE-2021-47095, CVE-2021-47094, CVE-2021-47093, CVE-2021-47091, CVE-2021-47087, CVE-2021-47082, CVE-2021-46936, CVE-2021-46933, CVE-2021-46931, CVE-2021-46930, CVE-2021-46929, CVE-2021-46927, CVE-2021-46926, CVE-2021-46925, CVE-2021-3521 Remediation Fixed Version: 7.0.520 Link: Drivers & Downloads Additional Information CVSS Score: - CVE-2024-39575: 7.4 - CVE-2024-38487: 7.0 CVSS Vector Strings: - CVE-2024-39575: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H - CVE-2024-38487: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H Revision History 1.0: 2024-06-20 - Initial release 2.0: 2024-06-25 - Added additional information for CVE-2022-23829 3.0: 2024-08-28 - Added VMSA-2024-0013 and proprietary code issues Related Links Dell Security Advisories and Notices Dell Vulnerability Response Policy CVSS Scoring Guide Legal Disclaimer Information is based on average risk assessment and may not represent actual risk. Dell Technologies assumes no responsibility for the applicability of the information; users should take appropriate action based on their own environment. Affected Products VxRail, CloudArray Virtual Edition for VxRail Appliance, Product Security Information, VMWare Cloud on Dell EMC VxRail E560F, VMWare Cloud on Dell EMC VxRail E560N, VxRail 460 and 470 Nodes, VxRail Appliance Family, VxRail Appliance Series Feedback Feedback options are available, including ratings for accuracy, usefulness, and ease of understanding.

Goal Reached Thanks to every supporter — we hit 100%!

Dell VxRail 7.0 Security Bulletin: Patching Multiple Third-Party CVEs Including CVE-2024-37085