Skip to content
OpenAdvisories
High · 8.4 CVE-2023-25539 EUVD-2023-29491GHSA-f3pc-jh8h-4mvw

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could po…

Published May 31, 2023 · Updated Jan 9, 2025 · Assigned by dell

Description

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. This is a high severity vulnerability as the exploitation allows an attacker to take complete control of a system, so Dell recommends customers to upgrade at the earliest opportunity.

Affected products

VendorProductAffectedFixed
Dell NetWorker NVE NetWorker 19.6.1.2 Linux and prior releases, NetWorker 19.7.0.3 Linux and prior releases, 19.7.1 Linux —

Advisories 1

References