CVE-2023-25539

CVE-2023-25539 is a critical OS command injection vulnerability in Dell NetWorker client versions prior to 19.6.1.2, affecting both Linux and Dell NetWorker products. This allows a remote, unauthenticated attacker to execute arbitrary OS commands with the privileges of the vulnerable application, potentially leading to complete system compromise. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation. Dell strongly recommends immediate upgrades to mitigate this high-risk vulnerability.