Dell PowerStore Family update for VMware vulnerabilities



Risk High
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2024-37085
CVE-2024-37086
CVE-2024-37087
CWE-ID CWE-287
CWE-125
CWE-400
Exploitation vector Network
Public exploit Vulnerability #1 is being exploited in the wild.
Vulnerable software
 PowerStore X
Other software / Other software solutions

Vendor Dell

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Improper Authentication

EUVDB-ID: #VU93317

Risk: High

CVSSv3.1: 6.9 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2024-37085

CWE-ID: CWE-287 - Improper Authentication

Exploit availability: No

Description

The vulnerability allows a remote user to compromise the ESXi host.

The vulnerability exists due to an error within the authentication process. A remote user with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PowerStore X: All versions

CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000228074/dsa-2024-365-dell-powerstore-family-security-update-for-vmware-vulnerabilities


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.

2) Out-of-bounds read

EUVDB-ID: #VU93318

Risk: Medium

CVSSv3.1: 5.9 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-37086

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a malicious user on the guest OS to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition. An attacker with access to the guest OS can trigger an out-of-bounds read and crash the host OS.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PowerStore X: All versions

CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000228074/dsa-2024-365-dell-powerstore-family-security-update-for-vmware-vulnerabilities


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource exhaustion

EUVDB-ID: #VU93319

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-37087

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources within the License Server. A remote attacker can send specially crafted packets to the server, trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PowerStore X: All versions

CPE2.3 External links

http://www.dell.com/support/kbdoc/nl-nl/000228074/dsa-2024-365-dell-powerstore-family-security-update-for-vmware-vulnerabilities


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###