PT-2014-8516 · Dell · Sonicwall Analyzer+3

Published 2014-11-21 · Updated 2018-03-12 · CVE-2014-8420

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Global Management System (GMS) versions prior to 7.2 SP2 SonicWALL Analyzer versions prior to 7.2 SP2 SonicWALL UMA versions prior to 7.2 SP2

Description The issue allows remote authenticated users to execute arbitrary code via unspecified vectors in the ViewPoint web application.

Recommendations For Dell SonicWALL Global Management System (GMS) versions prior to 7.2 SP2, update to version 7.2 SP2 or later. For SonicWALL Analyzer versions prior to 7.2 SP2, update to version 7.2 SP2 or later. For SonicWALL UMA versions prior to 7.2 SP2, update to version 7.2 SP2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-8420

ZDI-14-385

Affected Products

Sonicwall Global Management System

Sonicwall Analyzer

Sonicwall Uma

Viewpoint

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-8420 · Security Note
• https://support.software.dell.com/product-notification/136814 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-14-385 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8420 · Note
• http://securityfocus.com/bid/71241 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 · Note
• http://zerodayinitiative.com/advisories/ZDI-14-385 · Note