PT-2016-5154 · Dell · Dell Sonicwall Gms+3

Kernelsmith · Publicado 2016-02-10 · Atualizado 2018-03-12 · CVE-2016-2396

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056

Description The issue allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. This is related to the GMS ViewPoint web application.

Recommendations For versions 7.2 through 8.1 before Hotfix 168056, apply Hotfix 168056 to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2016-2396

ZDI-16-164

Produtos afetados

Analyzer

Dell Sonicwall Gms

Gms Viewpoint

Uma Em5000

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-2396 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-16-164 · Nota
• https://zerodayinitiative.com/advisories/ZDI-16-164 · Nota de Segurança
• https://support.software.dell.com/product-notification/185943 · Nota
• http://securitytracker.com/id/1035015 · Nota
• https://osv.dev/vulnerability/CVE-2016-2396 · Aviso do Fabricante