CVE-2016-9682

🗓️ 22 Feb 2017 05:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 56 Views🌐 WEB

SonicWall Secure Remote Access server is vulnerable to remote command injection in the diagnostics CGI component, allowing for shell access to the remote machine

Reporter	Title	Published	Views	Family All 14
0day.today	Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection Vulnerability	20 Jul 201700:00	–	zdt
BDU FSTEC	The vulnerability of the “diagnostics” component of the CGI application for the web interface of the Sonicwall Secure Remote Access system management console allows a hacker to execute arbitrary commands.	14 Dec 201700:00	–	bdu_fstec
CNVD	Dell SonicWall Secure Remote Access Server Command Injection Vulnerability	24 Feb 201700:00	–	cnvd
Check Point Advisories	SonicWall Secure Remote Access Server Command Injection (CVE-2016-9682)	6 Dec 202000:00	–	checkpoint_advisories
Cvelist	CVE-2016-9682	22 Feb 201705:00	–	cvelist
Dsquare	Dell SonicWALL Secure Remote Access diagnostics RCE	22 May 201700:00	–	dsquare
Exploit DB	Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection	19 Jul 201700:00	–	exploitdb
exploitpack	Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection	19 Jul 201700:00	–	exploitpack
NVD	CVE-2016-9682	22 Feb 201705:59	–	nvd
OpenVAS	Dell SonicWALL SMA 100 / SRA Series Multiple RCE Vulnerabilities (SNWLID-2016-0003, SNWLID-2016-0004, SNWLID-2016-0005)	24 Jul 201700:00	–	openvas

NVD

Node

dell sonicwall_secure_remote_access_serverMatch8.1.0.2-14sv

Source	Link
securityfocus	www.securityfocus.com/bid/96375
documents	www.documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues
exploit-db	www.exploit-db.com/exploits/42342/
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2016-0003

Parameter	Position	Path	Description	CWE
currentTSREmailTo	query param	cgi-bin/diagnostics	Remote command injection via diagnostics CGI parameter currentTSREmailTo in /cgi-bin/diagnostics	CWE-77
tsrDeleteRestartedFile	query param	cgi-bin/diagnostics	Remote command injection via diagnostics CGI parameter tsrDeleteRestartedFile in /cgi-bin/diagnostics	CWE-77

17 Jun 2026 00:56Current

9.9High risk

Vulners AI Score9.9

CVSS 39.8

CVSS 210

EPSS0.23296

CWE-77