critical9.9
CVE-2016-2396
The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated us…
Impact
The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Analyzer | Versions 7.2, 8.0, 8.1 |
| Sonicwall | Global Management System | Versions 7.2, 8.0, 8.1 |
| Sonicwall | Uma Em5000 Firmware | Versions 7.2, 8.0, 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1035015
- http://www.zerodayinitiative.com/advisories/ZDI-16-164
- https://support.software.dell.com/product-notification/185943
- http://www.securitytracker.com/id/1035015
- http://www.zerodayinitiative.com/advisories/ZDI-16-164
- https://support.software.dell.com/product-notification/185943