PT-2022-3188 · Dell · Dell Emc Networker

Published 2022-04-12 · Updated 2022-06-08 · CVE-2022-29082

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC NetWorker versions 19.1.x through 19.6.0.2

Description The issue is related to an improper validation of certificate with host mismatch in RabbitMQ, which could allow remote attackers to spoof certificates by connecting to port 5671. This vulnerability may enable a remote attacker to bypass security restrictions.

Recommendations For Dell EMC NetWorker versions 19.1.x through 19.6.0.2, as a temporary workaround, consider restricting access to the RabbitMQ port 5671 until a patch is available. Additionally, review and ensure proper certificate validation configurations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-297

CWE-295

Related Identifiers

BDU:2022-03870

CVE-2022-29082

Affected Products

Dell Emc Networker

References · 5

• https://bdu.fstec.ru/vul/2022-03870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-29082 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29082 · Vendor Advisory
• https://dell.com/support/kbdoc/000198987 · Vendor Advisory
• https://t.me/cibsecurity/43407 · Telegram Post