Cryptographic Weakness in Dell NetWorker Virtual Edition
CVE-2023-28053

5.3MEDIUM

Key Information:

Vendor
Dell
Status
NetWorker Virtual Edition
Vendor
CVE Published:
18 December 2023

Summary

Dell NetWorker Virtual Edition versions up to 19.8 are susceptible to a cryptographic vulnerability due to the use of outdated algorithms in the SSH component. This flaw allows a remote, unauthenticated attacker to potentially exploit the system, which may result in the exposure of sensitive information. To mitigate these risks, it is essential for users to upgrade to the latest version and implement best security practices.

Affected Version(s)

NetWorker Virtual Edition Versions 19.9 through 19.9.0.2

NetWorker Virtual Edition Versions 19.8 through 19.8.0.3

NetWorker Virtual Edition Versions 19.7 through 19.7.0.5

References

https://www.dell.com/support/kbdoc/en-us/000220547/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.