Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-28055

Опубликовано: 27 сент. 2023
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dell:networker:*:*:*:*:*:*:*:*
Версия от 19.7 (включая) до 19.7.0.5 (исключая)
cpe:2.3:a:dell:networker:*:*:*:*:*:*:*:*
Версия от 19.8 (включая) до 19.8.0.3 (исключая)
cpe:2.3:a:dell:networker:*:*:*:*:*:*:*:*
Версия от 19.9 (включая) до 19.9.0.2 (исключая)
cpe:2.3:a:dell:networker:19.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 23%
0.00075
Низкий

8.8 High

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 8.8
github
больше 2 лет назад

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.

EPSS

Процентиль: 23%
0.00075
Низкий

8.8 High

CVSS3

Дефекты

CWE-285