PT-2015-6376 · Dell · Uma Em5000+3

Kernelsmith · Publicado 2015-05-15 · Atualizado 2018-03-13 · CVE-2015-3990

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell Sonicwall GMS, Analyzer, and UMA EM5000 versions prior to 7.2 SP4

Description The issue allows remote authenticated users to execute arbitrary commands, related to configuration vectors in the GMS ViewPoint web application.

Recommendations For versions prior to 7.2 SP4, update to version 7.2 SP4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2015-3990

ZDI-15-231

Produtos afetados

Analyzer

Dell Sonicwall Gms

Gms Viewpoint

Uma Em5000

Referências · 7

• http://zerodayinitiative.com/advisories/ZDI-15-231 · Nota
• https://support.software.dell.com/product-notification/152178 · Nota
• http://securityfocus.com/bid/74756 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3990 · Nota de Segurança
• http://securitytracker.com/id/1032373 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3990 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-231 · Nota de Segurança