PT-2023-21517 · Dell · Dell Networker Virtual Edition

Published 2023-12-18 · Updated 2024-02-22 · CVE-2023-28053

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell NetWorker Virtual Edition versions 19.8 and below

Description The issue concerns the use of deprecated cryptographic algorithms in the SSH component, which could be exploited by a remote unauthenticated attacker, potentially leading to information disclosure.

Recommendations For versions 19.8 and below, update to a version above 19.8 to resolve the issue. As a temporary workaround, consider restricting access to the SSH component until a patch is available.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2023-28053

Affected Products

Dell Networker Virtual Edition

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-28053 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28053 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000220547/dsa-2023-358-security-update-for-dell-networker-virtual-edition-ssh-cryptographic-vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/72230 · Telegram Post
• https://t.me/cvenotify/64977 · Telegram Post