Back
CVE-2017-8023
CRITICAL
EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.
Published: Apr 1, 2019
Modified: Jun 17, 2026
CWE-287
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (4)
| Vendor | Product | Version |
|---|---|---|
| dell | emc_networker | * ≥ 8.2.0.0 < 8.2.4.11 |
| dell | emc_networker | * ≥ 9.0.0.0 |
| dell | emc_networker | * ≥ 9.1.0.0 < 9.1.1.5 |
| dell | emc_networker | * ≥ 9.2.0.0 < 9.2.1.0 |
GitHub Security Advisory GHSA-2mv3-6453-384c
EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution...
References (4)
- http://www.securityfocus.com/bid/107712
- https://seclists.org/fulldisclosure/2019/Mar/50 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/107712
- https://seclists.org/fulldisclosure/2019/Mar/50 Mailing List, Third Party Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
5.88%
Top 7% most likely to be exploited
Threat Score
41 / 100
Data Sources
NVD
EPSS
GitHub