The vulnerability of the “viewcert” component in the CGI application of the web interface for administering the Sonicwall Secure Remote Access server allows a perpetrator to execute arbitrary commands.

🗓️ 14 Dec 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The viewcert CGI vulnerability in Sonicwall Secure Remote Access allows command execution via the CERT parameter.

Reporter	Title	Published	Views	Family All 10
CNVD	Dell SonicWall Secure Remote Access Server Command Injection Vulnerability (CNVD-2017-02473)	24 Feb 201700:00	–	cnvd
Check Point Advisories	Sonicwall Secure Remote Access Server Command Injection (CVE-2016-9684)	6 Dec 202000:00	–	checkpoint_advisories
CVE	CVE-2016-9684	22 Feb 201705:00	–	cve
Cvelist	CVE-2016-9684	22 Feb 201705:00	–	cvelist
Dsquare	Dell SonicWALL Secure Remote Access viewcert RCE	22 May 201700:00	–	dsquare
Dsquare	Dell SonicWALL Secure Remote Access gencsr RCE	22 May 201700:00	–	dsquare
NVD	CVE-2016-9684	22 Feb 201705:59	–	nvd
OpenVAS	Dell SonicWALL SMA 100 / SRA Series Multiple RCE Vulnerabilities (SNWLID-2016-0003, SNWLID-2016-0004, SNWLID-2016-0005)	24 Jul 201700:00	–	openvas
Prion	Command injection	22 Feb 201705:59	–	prion
SonicWall	Dell SonicWall Secure Remote Access Multiple Command Injection Vulnerabilities	22 Feb 201705:59	–	sonicwall

Vulners

Node

dell_technologies sonicwall_secure_remote_accessMatch8.1.0.2-14sv

Source	Link
documents	www.documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues
pastebin	www.pastebin.com/g1e2qU6N
securityfocus	www.securityfocus.com/bid/96375
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 39.8

CVSS 210

EPSS0.0662

viewcert component cgi application web interface arbitrary command execution input sanitization failure dell sonicwall secure remote access