Lucene search

DellCVELIST:CVE-2017-8023

HistoryMar 26, 2019 - 12:00 a.m.

CVE-2017-8023 EMC Networker Remote Code Execution Vulnerability

2019-03-2600:00:00

dell

www.cve.org

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.

CNA Affected

[
  {
    "product": "Networker",
    "vendor": "Dell EMC",
    "versions": [
      {
        "status": "affected",
        "version": "8.2.X"
      },
      {
        "status": "affected",
        "version": "9.0.X"
      },
      {
        "lessThan": "9.1.15",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107712

seclists.org/fulldisclosure/2019/Mar/50

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

Related for CVELIST:CVE-2017-8023