← Back

CVE-2025-21103

nvd nist
Published: Feb 17, 2025Modified: Dec 6, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: security_alert@emc.com (Secondary)

Description

Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server.

Affected (2)

Products: Dell: Networker
Dell
1 product
Networker
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Networker
Before 19.10.0.7
Networker
From 19.11 to 19.11.0.3

Related CWEs

CWE-97
Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
The product generates a web page, but does not neutralize or incorrectly neutralizes user-controllable input that could be interpreted as a server-side include (SSI) directive.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.