PT-2014-8516 · Dell · Sonicwall Analyzer+3

Publicado 2014-11-21 · Atualizado 2018-03-12 · CVE-2014-8420

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Global Management System (GMS) versions prior to 7.2 SP2 SonicWALL Analyzer versions prior to 7.2 SP2 SonicWALL UMA versions prior to 7.2 SP2

Description The issue allows remote authenticated users to execute arbitrary code via unspecified vectors in the ViewPoint web application.

Recommendations For Dell SonicWALL Global Management System (GMS) versions prior to 7.2 SP2, update to version 7.2 SP2 or later. For SonicWALL Analyzer versions prior to 7.2 SP2, update to version 7.2 SP2 or later. For SonicWALL UMA versions prior to 7.2 SP2, update to version 7.2 SP2 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-8420

ZDI-14-385

Produtos afetados

Sonicwall Global Management System

Sonicwall Analyzer

Sonicwall Uma

Viewpoint

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8420 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8420 · Nota de Segurança
• http://securityfocus.com/bid/71241 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 · Nota
• http://zerodayinitiative.com/advisories/ZDI-14-385 · Nota
• https://support.software.dell.com/product-notification/136814 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-14-385 · Nota de Segurança