CVE-2011-1421: EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses...

Security readout for executives and security teams

CVE-2011-1421 is a local privilege-escalation issue in older EMC NetWorker releases when client push is enabled. A local user could potentially gain higher privileges because an unspecified file has weak permissions. The sources do not provide CVSS, detailed attack vectors, or evidence of active exploitation. Exposure is likely limited to organizations still running affected EMC NetWorker 7.5.x or 7.6.x versions with client push enabled. Systems without local user access or without client push enabled appear less exposed based on the provided description. Prioritize this for legacy backup environments, especially where multiple administrators or local users can access NetWorker systems. The business risk is privilege escalation on backup infrastructure, but urgency is moderated by local access requirements, feature dependence, and no cited active exploitation. Mitigation focus: Identify EMC NetWorker 7.5.x and 7.6.x installations.; Upgrade 7.5.x to 7.5.4.3 or later, per CVE version boundaries.; Upgrade 7.6.x to 7.6.1.5 or later, per CVE version boundaries..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.