PT-2014-6239 · Dell · Dell Sonicwall Scrutinizer

Brandonprry · Publicado 2014-07-16 · Atualizado 2018-03-12 · CVE-2014-4976

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dell SonicWall Scrutinizer version 11.0.1

Description The issue allows remote authenticated users to change user passwords. This is achieved by modifying the savePrefs parameter in a change password request to the "cgi-bin/admin.cgi" endpoint, specifically by utilizing the user ID.

Recommendations For Dell SonicWall Scrutinizer version 11.0.1, consider restricting access to the "cgi-bin/admin.cgi" endpoint until a patch is available. As a temporary workaround, avoid using the user ID in the savePrefs parameter to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-4976

Produtos afetados

Dell Sonicwall Scrutinizer

Referências · 8

• 🔥 https://gist.github.com/brandonprry/76741d9a0d4f518fe297 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94438 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4976 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4976 · Nota de Segurança
• http://seclists.org/fulldisclosure/2014/Jul/44 · Nota
• http://securityfocus.com/bid/68495 · Nota
• https://gist.github.com/brandonprry/36b4b8df1cde279a9305 · Nota
• http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html · Nota