CVE-2016-2396

EUVD-2016-3480
The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.9 CRITICAL
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
sonicwallanalyzer
7.2
sonicwallanalyzer
8.0
sonicwallanalyzer
8.1
sonicwallglobal_management_system
7.2
sonicwallglobal_management_system
8.0
sonicwallglobal_management_system
8.1
sonicwalluma_em5000_firmware
7.2
sonicwalluma_em5000_firmware
8.0
sonicwalluma_em5000_firmware
8.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id/1035015
http://www.zerodayinitiative.com/advisories/ZDI-16-164
https://support.software.dell.com/product-notification/185943
http://www.securitytracker.com/id/1035015
http://www.zerodayinitiative.com/advisories/ZDI-16-164
https://support.software.dell.com/product-notification/185943