PT-2014-6240 · Dell · Dell Sonicwall Scrutinizer

Bperry · Published 2014-07-16 · Updated 2018-03-12 · CVE-2014-4977

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dell SonicWall Scrutinizer version 11.0.1

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters in different API endpoints and functions, including the selectedUserGroup parameter in a create new user request to "cgi-bin/admin.cgi", the user id parameter in the changeUnit function, the methodDetail parameter in the methodDetail function, or the xcNetworkDetail parameter in the xcNetworkDetail function in "d4d/exporters.php".

Recommendations For Dell SonicWall Scrutinizer version 11.0.1, consider disabling the changeUnit function, the methodDetail function, and the xcNetworkDetail function until a patch is available. Restrict access to the "cgi-bin/admin.cgi" and "d4d/exporters.php" modules to minimize the risk of exploitation. Avoid using the selectedUserGroup, user id, methodDetail, and xcNetworkDetail parameters in the affected API endpoints and functions until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-4977

Affected Products

Dell Sonicwall Scrutinizer

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sonicwall_scrutinizer_methoddetail_sqli.rb · Exploit
• 🔥 https://gist.github.com/brandonprry/76741d9a0d4f518fe297 · Exploit
• 🔥 https://exploit-db.com/exploits/39836 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4977 · Security Note
• http://packetstormsecurity.com/files/137098/Dell-SonicWALL-Scrutinizer-11.01-methodDetail-SQL-Injection.html · Note
• http://seclists.org/fulldisclosure/2014/Jul/44 · Note
• http://securityfocus.com/bid/68495 · Note
• https://gist.github.com/brandonprry/36b4b8df1cde279a9305 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94439 · Note
• http://packetstormsecurity.com/files/127429/Dell-Sonicwall-Scrutinizer-11.01-Code-Execution-SQL-Injection.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4977 · Note