EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service (nsrexecd) irrespective of any auth used.
References
Link | Resource |
---|---|
https://www.dell.com/support/kbdoc/en-us/000208258/dsa-2023-041-dell-networker-security-update-for-nsrdump-vulnerability | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 04:08
Type | Values Removed | Values Added |
---|---|---|
Summary | EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service (nsrexecd) irrespective of any auth used. |
24 Feb 2023, 06:15
Type | Values Removed | Values Added |
---|---|---|
Summary | EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service (nsrexecd) irrespective of any auth used. |
15 Feb 2023, 15:55
Type | Values Removed | Values Added |
---|---|---|
First Time |
Dell emc Networker
Dell |
|
References | (MISC) https://www.dell.com/support/kbdoc/en-us/000208258/dsa-2023-041-dell-networker-security-update-for-nsrdump-vulnerability - Patch, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CWE | CWE-94 | |
CPE | cpe:2.3:a:dell:emc_networker:19.7.0.2:*:*:*:*:*:*:* cpe:2.3:a:dell:emc_networker:*:*:*:*:virtual:*:*:* |
03 Feb 2023, 19:50
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-02-03 19:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-24576
Mitre link : CVE-2023-24576
CVE.ORG link : CVE-2023-24576
JSON object : View
Products Affected
dell
- emc_networker
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')