CVE-2023-28055CWE-285

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client

High · published September 26, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.6th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-09-26T13:35Z
EPSS history
Timeline
  • 26 SEP 13:35Z
    Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client
    cvelistv5