critical9.8Public exploit code
CVE-2013-1360
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SonicWALL GMS/Viewpoint/Analyzer - Authentication Bypass2013-01-18 · webapps · multiple
Impact
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Analyzer | Version 7.0 |
| Sonicwall | Global Management System | Versions 4.1, 5.0, 5.1, 6.0, 7.0 |
| Sonicwall | Universal Management Appliance | Versions 5.1, 6.0, 7.0 |
| Sonicwall | Viewpoint | Versions 4.1, 5.0, 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0075.html
- http://www.exploit-db.com/exploits/24203
- http://www.securityfocus.com/bid/57446
- http://www.securitytracker.com/id/1028007
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81366
- https://packetstormsecurity.com/files/cve/CVE-2013-1360
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0075.html
- http://www.exploit-db.com/exploits/24203
- http://www.securityfocus.com/bid/57446
- http://www.securitytracker.com/id/1028007
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81366
- https://packetstormsecurity.com/files/cve/CVE-2013-1360