PT-2016-5154 · Dell · Dell Sonicwall Gms+3

Kernelsmith · Published 2016-02-10 · Updated 2018-03-12 · CVE-2016-2396

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056

Description The issue allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. This is related to the GMS ViewPoint web application.

Recommendations For versions 7.2 through 8.1 before Hotfix 168056, apply Hotfix 168056 to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2016-2396

ZDI-16-164

Affected Products

Analyzer

Dell Sonicwall Gms

Gms Viewpoint

Uma Em5000

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-2396 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-16-164 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2396 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-16-164 · Note
• https://support.software.dell.com/product-notification/185943 · Note
• http://securitytracker.com/id/1035015 · Note