PT-2020-16335 · Dell Emc · Dell Emc Networker

Published 2020-10-16 · Updated 2020-10-21 · CVE-2020-26183

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC NetWorker versions prior to 19.3.0.2

Description The issue concerns an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulnerability to perform nsrmmdbd operations in an unintended manner.

Recommendations For versions prior to 19.3.0.2, update to version 19.3.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the nsrmmdbd operations to minimize the risk of exploitation.

Fix

Improper Authorization

Files Accessible to External Parties

Weakness Enumeration

CWE-285

CWE-552

Related Identifiers

CVE-2020-26183

Affected Products

Dell Emc Networker

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-26183 · Security Note
• https://dell.com/support/security/en-us/details/546616/DSA-2020-229-Dell-EMC-NetWorker-Multiple-Security-Vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26183 · Vendor Advisory
• https://t.me/cibsecurity/15342 · Telegram Post