Lucene search

DellCVELIST:CVE-2017-8023

HistoryApr 01, 2019 - 8:54 p.m.

CVE-2017-8023 EMC Networker Remote Code Execution Vulnerability

2019-04-0120:54:47

dell

www.cve.org

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.011

Percentile

84.2%

JSON

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.

CNA Affected

[
  {
    "product": "Networker",
    "vendor": "Dell EMC",
    "versions": [
      {
        "status": "affected",
        "version": "8.2.X"
      },
      {
        "status": "affected",
        "version": "9.0.X"
      },
      {
        "lessThan": "9.1.15",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107712

seclists.org/fulldisclosure/2019/Mar/50

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.011

Percentile

84.2%

JSON

Related for CVELIST:CVE-2017-8023