High WID-SEC-2023-2524 3 CVEs

Dell NetWorker vProxy: Mehrere Schwachstellen

Published Oct 1, 2023 · Updated Oct 1, 2023 · de-DE

Vendor: Dell Product: NetWorker Product: NetWorker < vProxy 19.8.0.3 Product: NetWorker < vProxy 19.9.0.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Dell NetWorker vProxy ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service zu verursachen.

Product

Dell NetWorker stellt zentralisiert Backup- und Recovery-Dienste bereit.

Vulnerabilities 3

Critical 9.8

CVE-2020-13576

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially c…

gsoap gsoap Debian Ubuntu

Feb 10, 2021
Unscored —

CVE-2017-9765 EPSS 42%

Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and o…

gsoap gsoap r-other-x4r Debian Ubuntu

Jul 20, 2017
Unscored —

CVE-2019-7659

Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possib…

gsoap gsoap r-other-x4r Debian Ubuntu

Feb 9, 2019

Revision history

2023-10-01 #1
Initiale Fassung

References

Dell Security Update for Dell NetWorker vProxy vom 2023-10-01
https://www.dell.com/support/kbdoc/nl-nl/000217446/dsa-2023-267-security-update-for-dell-networker-vproxy-gsoap-vulnerabilities