// For flags

CVE-2017-8023

EMC Networker Remote Code Execution Vulnerability

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.

EMC NetWorker, podría ser vulnerable a una ejecución remota de código sin autenticar en el servicio de ejecución "Networker Client" (nsrexecd) cuando se utiliza el método de autenticación "oldauth". Un atacante remoto no autenticado podría enviar comandos arbitrarios mediante un servicio RPC que se ejecutará en el sistema host con los privilegios del servicio "nsrexecd", que se ejecuta con privilegios de administrador.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-04-21 CVE Reserved
  • 2019-03-27 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-287: Improper Authentication
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Dell
Search vendor "Dell"
 Emc Networker
Search vendor "Dell" for product "Emc Networker"
 >= 8.2.0.0 < 8.2.4.11
Search vendor "Dell" for product "Emc Networker" and version " >= 8.2.0.0 < 8.2.4.11"
-
Affected
Dell
Search vendor "Dell"
 Emc Networker
Search vendor "Dell" for product "Emc Networker"
 >= 9.0.0.0 <= 9.0.1.9
Search vendor "Dell" for product "Emc Networker" and version " >= 9.0.0.0 <= 9.0.1.9"
-
Affected
Dell
Search vendor "Dell"
 Emc Networker
Search vendor "Dell" for product "Emc Networker"
 >= 9.1.0.0 < 9.1.1.5
Search vendor "Dell" for product "Emc Networker" and version " >= 9.1.0.0 < 9.1.1.5"
-
Affected
Dell
Search vendor "Dell"
 Emc Networker
Search vendor "Dell" for product "Emc Networker"
 >= 9.2.0.0 < 9.2.1.0
Search vendor "Dell" for product "Emc Networker" and version " >= 9.2.0.0 < 9.2.1.0"
-
Affected