Listen to this Post
How the CVE Works
CVE-2025-21104 is an open redirect vulnerability in Dell NetWorker Management Console (NMC) affecting versions before 19.12.0.1 and 19.11.0.4. An attacker can craft a malicious URL that exploits improper input validation in the NMC web interface. When a user clicks the manipulated link, the application redirects them to an arbitrary external domain controlled by the attacker. This could facilitate phishing campaigns, tricking users into revealing credentials or other sensitive data. The flaw requires no authentication, making it exploitable remotely via crafted HTTP requests.
DailyCVE Form
Platform: Dell NetWorker
Version: <19.12.0.1, <19.11.0.4
Vulnerability: Open Redirect
Severity: Medium
Date: 08/18/2025
Prediction: Patch by 10/2025
What Undercode Say
Analytics:
curl -I "http://target/nmc/login?redirect=http://malicious.com" nmap -p 443 --script http-open-redirect <target_IP>
How Exploit:
- Crafted HTTP request with malicious `redirect` parameter.
- Social engineering to lure users into clicking the link.
Protection from this CVE:
- Upgrade to NetWorker 19.12.0.1 or 19.11.0.4.
- Implement URL whitelisting in web filters.
Impact:
- Phishing attacks leading to credential theft.
- Reputation damage due to abuse of legitimate domains.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
