PT-2015-6376 · Dell · Uma Em5000+3

Kernelsmith · Published 2015-05-15 · Updated 2018-03-13 · CVE-2015-3990

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell Sonicwall GMS, Analyzer, and UMA EM5000 versions prior to 7.2 SP4

Description The issue allows remote authenticated users to execute arbitrary commands, related to configuration vectors in the GMS ViewPoint web application.

Recommendations For versions prior to 7.2 SP4, update to version 7.2 SP4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2015-3990

ZDI-15-231

Affected Products

Analyzer

Dell Sonicwall Gms

Gms Viewpoint

Uma Em5000

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-3990 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-231 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-15-231 · Note
• https://support.software.dell.com/product-notification/152178 · Note
• http://securityfocus.com/bid/74756 · Note
• http://securitytracker.com/id/1032373 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3990 · Note