PT-2014-6239 · Dell · Dell Sonicwall Scrutinizer

Brandonprry · Published 2014-07-16 · Updated 2018-03-12 · CVE-2014-4976

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dell SonicWall Scrutinizer version 11.0.1

Description The issue allows remote authenticated users to change user passwords. This is achieved by modifying the savePrefs parameter in a change password request to the "cgi-bin/admin.cgi" endpoint, specifically by utilizing the user ID.

Recommendations For Dell SonicWall Scrutinizer version 11.0.1, consider restricting access to the "cgi-bin/admin.cgi" endpoint until a patch is available. As a temporary workaround, avoid using the user ID in the savePrefs parameter to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-4976

Affected Products

Dell Sonicwall Scrutinizer

References · 8

• 🔥 https://gist.github.com/brandonprry/76741d9a0d4f518fe297 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4976 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94438 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4976 · Note
• http://seclists.org/fulldisclosure/2014/Jul/44 · Note
• http://securityfocus.com/bid/68495 · Note
• https://gist.github.com/brandonprry/36b4b8df1cde279a9305 · Note
• http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html · Note