exploitDog

CVE-2025-21107

Опубликовано: 30 янв. 2025

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Ссылки

https://www.dell.com/support/kbdoc/en-us/000278811/dsa-2025-064-security-update-for-dell-networker-networker-virtual-edition-and-networker-management-console-multiple-component-vulnerabilities
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:dell:networker:*:*:*:*:*:*:*:*

Версия до 19.11.0.3 (исключая)

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.00029

Низкий

7.8 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

GHSA-3qjq-8563-xqpx

CVSS3: 7.8

github

около 1 года назад

Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

EPSS

Процентиль: 8%

0.00029

Низкий

7.8 High

CVSS3

Дефекты

CWE-428