Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r5pr-2qfg-vfr4

Опубликовано: 03 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.

EPSS

Процентиль: 79%
0.01287
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service (nsrexecd) irrespective of any auth used.

CVSS3: 9.8
fstec
около 3 лет назад

Уязвимость компонента NetWorker Client (nsrexecd) системы резервного копирования и восстановления данных Dell EMC NetWorker, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 79%
0.01287
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94