CVE-2017-8023 json
EMC Networker Remote Code Execution Vulnerability
published 2019-04-01 7 y ago modified 2026-06-17 4 mo ago also EUVD-2017-16993
- cvss
- 9.8
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.9%
- EPSS 5.9% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.
Patch / fix
- Dell EMC Networker 9.1.15, 9.2.1
Exploit prediction
5.88% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Dell EMC Networker
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
seclists.org
/fulldisclosure/2019/Mar/50
mailing-list, third-party-advisory
-
securityfocus.com
/bid/107712
vdb-entry
Sources
- CVE List CVE-2017-8023
- NVD CVE-2017-8023
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.