CVE-2025-21103
Dell Networker ≤ 19.10.0.7
Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSummary
CVE-2025-21103 is a high-severity Improper Neutralization of Server-Side Includes (SSI) Within a Web Page (CWE-97) vulnerability in Dell Networker. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 12th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and SA-8 (Security and Privacy Engineering Principles) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2025-21103 is an improper neutralization of server-side vulnerability (CWE-97) affecting Dell NetWorker Management Console in versions 19.11 through 19.11.0.3 and all versions prior to 19.10.0.7. This flaw enables an unauthenticated attacker with local access to potentially execute arbitrary code on the server. The vulnerability received a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high impact with local access, low complexity, no privileges required, and user interaction needed.
An unauthenticated attacker who gains local access to the affected system can exploit this vulnerability to achieve remote code execution. The attack requires the victim to interact in some way, such as opening a malicious file or interface element, but no authentication or elevated privileges are necessary on the part of the attacker.
Dell has published DSA-2025-095, a security advisory with details on mitigation available at https://www.dell.com/support/kbdoc/en-us/000286268/dsa-2025-095-security-update-for-dell-networker-management-console-vulnerability. Security practitioners should consult this advisory for patching instructions and apply updates to remediate the issue.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-4866
Vulnerability Data
Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Input validation directly stops untrusted data from being interpreted as SSI directives during page generation.
Engineering principles require proper input neutralization to avoid injection of server-side directives.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly require input neutralization to block SSI injection.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing can detect SSI flaws but does not itself implement the neutralization controls.
Secure SDLC mandates input validation and output encoding that directly prevent SSI injection.
Application security requirements include rules for neutralizing server-side directives in user input.
Secure architecture principles reduce the attack surface for SSI but do not prescribe specific neutralization techniques.
Secure coding standards explicitly require escaping or disabling SSI constructs in dynamic web content.