CVE-2023-25539

Name of the Vulnerable Software and Affected Versions Dell NetWorker version 19.6.1.2

Description The issue is an OS command injection vulnerability in the NetWorker client, allowing a remote unauthenticated attacker to execute arbitrary OS commands on the application's underlying OS with the privileges of the vulnerable application. This could lead to an attacker taking complete control of a system.

Recommendations For Dell NetWorker version 19.6.1.2, upgrade to a newer version at the earliest opportunity to resolve the issue. As a temporary workaround, consider restricting access to the NetWorker client to minimize the risk of exploitation.