DSA-2023-300 : Security Update for Dell NetWorker Multiple Security Vulnerabilities
Сводка: Dell NetWorker remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Данная статья применяется к
Данная статья не применяется к
Эта статья не привязана к какому-либо конкретному продукту.
В этой статье указаны не все версии продуктов.
Влияние
High
Подробные сведения
| Third-party Component | CVEs | More Information |
|---|---|---|
| Apache SOAP | CVE-2022-40705 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/  |
| Snakeyaml | CVE-2022-25857, CVE-2023-2251, CVE-2022-3064 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| Woodstox | CVE-2022-40152 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| Json-smart | CVE-2023-1370 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| Apache Tomcat | CVE-2023-34981 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
Затронутые продукты и исправление
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions 19.9 through 19.9.0.2 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions 19.8 through 19.8.0.3 | Versions 19.8.0.4 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions 19.7 through 19.7.0.5 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Version 19.7.1 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions prior to 19.7 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions 19.9 through 19.9.0.2 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions 19.8 through 19.8.0.3 | Versions 19.8.0.4 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions 19.7 through 19.7.0.5 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Version 19.7.1 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions prior to 19.7 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions 19.9 through 19.9.0.2 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions 19.8 through 19.8.0.3 | Versions 19.8.0.4 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions 19.7 through 19.7.0.5 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Version 19.7.1 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions prior to 19.7 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions 19.9 through 19.9.0.2 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions 19.8 through 19.8.0.3 | Versions 19.8.0.4 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions 19.7 through 19.7.0.5 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Version 19.7.1 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2022-40152, CVE-2022-25857, CVE-2023-2251, CVE-2022-3064, CVE-2022-40705 | Dell Networker | NetWorker Authentication Service, FLR, VCUI |
Versions prior to 19.7 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions 19.9 through 19.9.0.2 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions 19.8 through 19.8.0.3 | Versions 19.8.0.4 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions 19.7 through 19.7.0.5 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Version 19.7.1 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-1370 | Dell Networker | NetWorker Authentication Service. | Versions prior to 19.7 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions 19.9 through 19.9.0.2 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions 19.8 through 19.8.0.3 | Versions 19.8.0.4 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions 19.7 through 19.7.0.5 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Version 19.7.1 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-34981 | Dell Networker | NetWorker Authentication Service, NetWorker Server | Versions prior to 19.7 | Versions 19.9.0.3 or later | https://www.dell.com/support/home/product-support/product/networker/drivers |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
- Platforms: Windows & Linux (All variants and flavors are impacted)
- Versions prior to 19.7 means versions 19.6.x, 19.5.x, 19.4.x family of releases that are still under standard support. For more information on Dell End-of-Life Documents for converged infrastructure, midrange and enterprise storage, and storage networking products kindly refer to: https://www.dell.com/support/kbdoc/000185734/all-dell-emc-end-of-life-documents?lang=en
- Unless specified as impacted, the term “or Later” encompasses all NetWorker releases, under standard support, that are of a higher minor or major version than the specified release.
- Dell recommends that you always upgrade to the latest release/version for your product
История изменений
| Revision | Date | Description |
| 1.0 | 2023-12-21 | Initial Release |
Связанная информация
Правовая оговорка
Затронутые продукты
NetWorker Family, NetWorker, NetWorker Series, NetWorker Module, Product Security InformationСвойства статьи
Номер статьи: 000220649
Тип статьи: Dell Security Advisory
Последнее изменение: 09 Sep 2025
Получите ответы на свои вопросы от других пользователей Dell
Услуги технической поддержки
Проверьте, распространяются ли на ваше устройство услуги технической поддержки.