CVE-2023-28055 - CVE House
Back to Database
Status published High CVE-2023-28055

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in...

Vulnerability Description

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-28055

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

NetWorker
Vulnerable Versions:
Versions 19.9 through 19.9.0.1, Versions 19.8, through 19.8.0.2, Versions 19.7 through 19.7.0.4, Version 19.7.1

Timeline

Official Publish: September 26th, 2023
Last Modified: September 24th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)