CVE-2016-2396

9.9CRITICAL

Key Information:

Vendor
Sonicwall
Status
Analyzer
Global Management System
Vendor
CVE Published:
17 February 2016

Summary

The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input.

References

http://www.securitytracker.com/id/1035015
vdb-entryx_refsource_SECTRACK
http://www.zerodayinitiative.com/advisories/ZDI-16-164
x_refsource_MISC
https://support.software.dell.com/product-notification/18...
x_refsource_CONFIRM

EPSS Score

11% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.