Vulnerability Details CVE-2023-25539
Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. This is a high severity vulnerability as the exploitation allows an attacker to take complete control of a system, so Dell recommends customers to upgrade at the earliest opportunity.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.1%
CVSS Severity
CVSS v3 Score 8.4
References
Products affected by CVE-2023-25539
-
cpe:2.3:a:dell:networker:-
-
cpe:2.3:a:dell:networker:19.6.1.2
-
cpe:2.3:a:dell:networker:19.7
-
cpe:2.3:a:dell:networker:19.7.0.3
-
cpe:2.3:a:dell:networker:19.7.1
-
cpe:2.3:o:linux:linux_kernel:-