CVE-2021-21569CWE-78

Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability

Medium · published September 28, 2021

CVSS v3.1
6.8
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00960 · 61.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-09-28T19:20Z
EPSS history
Timeline
  • 28 SEP 19:20Z
    Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability
    cvelistv5