CVE-2023-28055

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information leaks, denial of service, and arbitrary code execution. Dell recommends customers to upgrade at the earliest opportunity.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-280566.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280586.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280596.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-28068.8A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoCVE-2023-280606.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280616.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280628.8Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low CVE-2023-280634.4Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potCVE-2023-280644.6Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leCVE-2023-280657.3Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount CVE-2023-280667.8Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-adminisCVE-2023-280687.8Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user ca
CVE-2023-28055: High severity, CVSS 8.8 | Vulnix