PT-2021-14616 · Dell · Dell Networker

Quentin Kaiser · Published 2021-09-28 · Updated 2021-10-03 · CVE-2021-21569

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell NetWorker versions 18.x through 19.x

Description The issue is a Path traversal vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information.

Recommendations For Dell NetWorker versions 18.x through 19.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Path traversal

Weakness Enumeration

CWE-78

CWE-22

Related Identifiers

CVE-2021-21569

Affected Products

Dell Networker

References · 9

• 🔥❌ https://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-21569 · Exploit, Deleted
• 🔥❌ https://github.com/AlAIAL90/CVE-2021-21569 · Exploit, Deleted
• https://dell.com/support/kbdoc/en-us/000188311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21569 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21569 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/4434 · Telegram Post
• https://t.me/cibsecurity/29601 · Telegram Post
• https://t.me/cvenotify/21605 · Telegram Post
• https://t.me/cvenotify/21743 · Telegram Post