CVE-2023-24576

CVE-2023-24576 targets Dell EMC NetWorker: a remote, unauthenticated code-execution vulnerability in the NetWorker Client execution service (nsrexecd). The impact is high (Unchanged scope) with potential full compromise of the host; CVSS metrics indicate network access, low complexity, no privile...

CVE-2021-21546

CVE-2021-21546 affects Dell EMC NetWorker 18.x and 19.x (before 19.3.0.4 and 19.4.0.0). A local, low-privilege attacker could read plain-text credentials from server log files due to an information-disclosure vulnerability in log handling. Remediation: apply Dell EMC updates (per Dell KB 00018547...

CVE-2021-21570

Dell EMC NetWorker 18.x and 19.x contain an Information Disclosure vulnerability (CVE-2021-21570) that could let a NetWorker server user with remote access to NetWorker clients access unauthorized information. The issue affects versions prior to 19.4.0.4; remediation is to upgrade to 19.4.0.4 (as...

CVE-2018-1218

Dell EMC NetWorker nsrd daemon vulnerable to a buffer overflow that can cause a remote DoS. Affected versions include 8.2.4.11 and earlier, 9.0.x, 9.1.1.5 and earlier, and 9.2.x earlier than 9.2.1.1; remediation is to upgrade to 8.2.4.11 or later and to 9.1.1.6 or 9.2.1.1 or later. Exploitation h...

CVE-2021-21569

Dell EMC NetWorker 18.x and 19.x are affected by CVE-2021-21569, a path traversal vulnerability in the NetWorker server that could allow a remote client with server access to access unauthorized information (confidentiality impact). Public sources in the connected documents confirm the remediatio...

CVE-2022-29082

Dell EMC NetWorker (versions 19.1.x–19.6.x, including 19.6.0.1/19.6.0.2) is affected by an Improper Validation of Certificate with Host Mismatch vulnerability in RabbitMQ port 5671, per multiple sources. The issue allows remote certificate spoofing due to host-mismatch certificate validation. No ...

CVE-2023-28053

Dell NetWorker Virtual Edition versions 19.8 and earlier are affected by a vulnerability in the SSH component due to the use of deprecated cryptographic algorithms, enabling an unauthenticated remote attacker to potentially disclose information. Affected products include Dell NetWorker Virtual Ed...

CVE-2018-11050

Dell EMC NetWorker is affected by CVE-2018-11050 in versions 9.0–9.1.1.8, 9.2.1.3, and 18.1.0.1. The issue is a Clear-Text authentication over the network in the RabbitMQ AMQP component, causing user credentials to be sent unencrypted to the remote AMQP service. An unauthenticated attacker on the...

CVE-2022-34368

Dell EMC NetWorker (Windows) prior to patch levels 19.6.1.2 or 19.7.0.0 is affected by CVE-2022-34368 for an improper handling of insufficient permissions, enabling an authenticated non-admin user to access restricted resources. Affected versions include 19.2.1.x through 19.7.0.0. Remediation: up...

CVE-2023-24567

Affected software: Dell EMC NetWorker (versions 19.5 and earlier). Vulnerability: RabbitMQ version disclosure allowing a NetWorker server user with remote access to NetWorker clients to perform target-specific attacks. Root cause/impact: information disclosure of the RabbitMQ version, enabling co...

CVE-2023-25544

Dell NetWorker 19.5 and earlier are affected by an Apache Tomcat version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may exploit this to launch target-specific attacks. Dell EMC security advisory DSA-2023-058 documents the fix/update; CVSS indicates h...

CVE-2017-8023

EMC NetWorker is affected by an unauthenticated remote code execution in the Networker Client execution service (nsrexecd) when oldauth is used. An unauthenticated attacker can send arbitrary commands through the RPC service, executed with the nsrexecd process’s administrative privileges. The iss...

CVE-2021-21559

Dell EMC NetWorker (versions 18.x, 19.1.x, 19.2.x, 19.3.x, 19.4, 19.4.0.1) has an Improper Certificate Validation vulnerability in the NetWorker Management Console client that can allow an unauthenticated attacker on the same network to perform man-in-the-middle attacks and intercept/tamper SSL t...

CVE-2021-21558

Dell EMC NetWorker (versions 18.x, 19.1.x, 19.2.x, 19.3.x, 19.4, 19.4.0.1) contains an Information Disclosure vulnerability (CVE-2021-21558) that can be exploited by a local administrator to read LDAP credentials from local logs and use them to modify the network domain. The issue is rooted in ho...

CVE-2021-21600

CVE-2021-21600 affects Dell EMC NetWorker (19.4 and earlier). An authorized API user could exploit the vulnerability via the web and desktop interfaces to cause denial of service in the manageability path, due to an uncontrolled resource consumption flaw in the API service. Practical impact is de...

CVE-2021-36311

CVE-2021-36311 affects Dell EMC NetWorker (versions prior to 19.5). The vulnerability is an Improper Authorization flaw that lets a local attacker with networker user privileges upload a malicious file to unauthorized locations and execute it. The issue arises from where uploaded content executes...

CVE-2020-26182

Dell EMC NetWorker prior to 19.3.0.2 is vulnerable to an incorrect privilege assignment that lets a non‑LDAP remote user with low privileges perform "saveset" related operations in an unintended manner. LDAP-authenticated users are not exploitable per the sources. The issue is mitigated by upgrad...

CVE-2020-26183

Dell EMC NetWorker versions before 19.3.0.2 have an improper authorization vulnerability that allows certain remote users with low privileges to perform unintended nsrmmdbd operations. The affected software is Dell EMC NetWorker; root cause is improper authorization, enabling information exposure...