Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDell Networker
APPDell19.7.119.7 – 19.7.0.5 (excl.)19.8 – 19.8.0.3 (excl.)19.9 – 19.9.0.2 (excl.)
Related vulnerabilities
Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s)...
Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted S...
Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability...
Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during b...
Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote una...