CVE-2023-24576
CVSS V2 None
CVSS V3 None
Description
EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service (nsrexecd) irrespective of any auth used.
Overview
- CVE ID
- CVE-2023-24576
- Assigner
- security_alert@emc.com
- Vulnerability Status
- Modified
- Published Version
- 2023-02-03T19:15:14
- Last Modified Date
- 2023-02-24T06:15:11
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:dell:emc_networker:*:*:*:*:virtual:*:*:* | 1 | OR | 19.8 | |
| cpe:2.3:a:dell:emc_networker:19.7.0.2:*:*:*:*:*:*:* | 1 | OR |
References
| Reference URL | Reference Tags |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000208258/dsa-2023-041-dell-networker-security-update-for-nsrdump-vulnerability | Patch Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-24576 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24576 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-04-17 07:11:55 | Added to TrackCVE | |||
| 2023-04-17 07:11:56 | Weakness Enumeration | new |