CVE-2025-21107

Summary

Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected Software

VendorProductVersion RangeStatus
DellNetWorker19.11 <= 19.11.0.2affected
DellNetWorker19.10 <= 19.10.0.6affected
DellNetWorkerN/A < 19.10affected

Weaknesses

  • CWE-428: CWE-428: Unquoted Search Path or Element

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References