PT-2016-5154

CVE-2016-2396

·

Published

2016-02-10

·

Updated

2018-03-12

Description by

CVSS 3.1
9.9
Critical
MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056
Description The issue allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. This is related to the GMS ViewPoint web application.
Recommendations For versions 7.2 through 8.1 before Hotfix 168056, apply Hotfix 168056 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')
Related identifiers
CVE-2016-2396
ZDI-16-164
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com