CVE-2023-25539

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. This is a high severity vulnerability as the exploitation allows an attacker to take complete control of a system, so Dell recommends customers to upgrade at the earliest opportunity.

• CWE-94
• CWE-78

• https://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerabilityVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerabilityVendor Advisory

Published

May 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25532NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where …7.5
• CVE-2023-25533NVIDIA DGX H100 BMC contains a vulnerability in the web UI, …9.8
• CVE-2023-25534NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where …9.8
• CVE-2023-25535 Dell SupportAssist for Home PCs Installer Executable file v…6.5
• CVE-2023-25536 Dell PowerScale OneFS 9.4.0.x contains exposure of sensitiv…6.7
• CVE-2023-25537 Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and…7.8
• CVE-2023-2554External Control of File Name or Path in GitHub repository u…7.2
• CVE-2023-25540 Dell PowerScale OneFS 9.4.0.x contains an incorrect default…7.1
• CVE-2023-25542 Dell Trusted Device Agent, versions prior to 5.3.0, contain…7.8
• CVE-2023-25543 Dell Power Manager, versions prior to 3.14, contain an Impr…7.8
• CVE-2023-25544 Dell NetWorker versions 19.5 and earlier contain 'Apache To…6.5
• CVE-2023-25545Improper buffer restrictions in some Intel(R) Server Board B…6.7