critical9.8
CVE-2016-2397
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and …
Impact
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Uma Em5000 Firmware | Versions 7.2, 8.0, 8.1 |
| Sonicwall | Analyzer | Versions 7.2, 8.0, 8.1 |
| Sonicwall | Global Management System | Versions 7.2, 8.0, 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1035015
- http://www.zerodayinitiative.com/advisories/ZDI-16-163
- https://support.software.dell.com/product-notification/185943
- http://www.securitytracker.com/id/1035015
- http://www.zerodayinitiative.com/advisories/ZDI-16-163
- https://support.software.dell.com/product-notification/185943