CVEvulnerability

CVE-2023-28055

8.8 HIGH Published 2023-09-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-285

Description

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.

Affected configurations

• dell networker (>= 19.7 < 19.7.0.5) • dell networker (>= 19.8 < 19.8.0.3) • dell networker (>= 19.9 < 19.9.0.2) • dell networker 19.7.1

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References