What is CVE-2017-8023?

CVE-2017-8023 is a critical-severity vulnerability in Dell Emc_networker, classified under Improper Authentication. CVSS score: 9.8/10. Published 2019-04-01.

How severe is CVE-2017-8023?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Dell Emc_networker

CVE-2017-8023

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could…

Vulnerability class: Broken Authentication

EPSS: 0.059 (92.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Emc_networker
Dell Emc Networker — versions 8.2.X, unspecified, 9.0.X

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security_alert@emc.com (Mailing List, Third Party Advisory, x_refsource_MISC)
security_alert@emc.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-8023?: CVE-2017-8023 is a critical-severity vulnerability in Dell Emc_networker, classified under Improper Authentication. CVSS score: 9.8/10. Published 2019-04-01.
How severe is CVE-2017-8023?: Critical severity. CVSS v3 base score is 9.8 out of 10.