{"id":"CVE-2023-28053","aliases":["EUVD-2023-31778","GHSA-f939-f794-mqvc"],"status":"published","title":"Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated...","description":"Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00404,"percentile":0.34893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2023-12-18T11:30:11Z","modified":"2026-06-17T05:46:41Z","products":[{"vendor":"dell","product":"emc_networker"},{"vendor":"dell","product":"networker virtual edition"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000220547/dsa-2023-358-security-update-for-dell-networker-virtual-edition-ssh-cryptographic-vulnerabilities","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-f939-f794-mqvc"}],"sources":{"cve":[{"id":"CVE-2023-28053","description":"\nDell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure.\n\n","status":"published","published":"2023-12-18T11:30:11.738Z","modified":"2024-08-02T12:30:24.034Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-31778","description":"\nDell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure.\n\n","status":"published","published":"2023-12-18T11:30:11Z","modified":"2024-08-02T12:30:24Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T03:50:06.256765Z"}],"ghsa":[{"id":"GHSA-f939-f794-mqvc","title":"\nDell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated...","description":"\nDell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure.\n\n","status":"published","published":"2023-12-22T21:30:21Z","modified":"2024-04-10T18:19:12Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:57:05.342619Z"}],"nvd":[{"id":"CVE-2023-28053","description":"\nDell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to some information disclosure.\n\n","status":"published","published":"2023-12-18T12:15:07.123Z","modified":"2026-06-17T05:46:41.633Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:08:56.329586Z"}]}}