Lucene search

K
cve[email protected]CVE-2012-2627
HistoryJul 31, 2012 - 10:45 a.m.

CVE-2012-2627

2012-07-3110:45:00
NVD-CWE-Other
web.nvd.nist.gov
20
cve-2012-2627
plixer scrutinizer
dell sonicwall scrutinizer
remote attack
arbitrary files
vulnerability

6.9 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

0.004 Low

EPSS

Percentile

74.1%

d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.

6.9 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

0.004 Low

EPSS

Percentile

74.1%