CVE-2016-9683

🗓️ 22 Feb 2017 05:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface

Reporter	Title	Published	Views	Family All 10
0day.today	Sonicwall SRA 8.1.0.2-14sv Remote Command Execution Exploit	24 Feb 201700:00	–	zdt
BDU FSTEC	The vulnerability of the “extensionsettings” component of the CGI application for the web interface of the Sonicwall Secure Remote Access server management system allows a hacker to execute arbitrary commands.	14 Dec 201700:00	–	bdu_fstec
CNVD	Dell SonicWall Secure Remote Access Server Command Injection Vulnerability (CNVD-2017-02472)	24 Feb 201700:00	–	cnvd
Cvelist	CVE-2016-9683	22 Feb 201705:00	–	cvelist
NVD	CVE-2016-9683	22 Feb 201705:59	–	nvd
OpenVAS	Dell SonicWALL SMA 100 / SRA Series Multiple RCE Vulnerabilities (SNWLID-2016-0003, SNWLID-2016-0004, SNWLID-2016-0005)	24 Jul 201700:00	–	openvas
OSV	CVE-2016-9683	22 Feb 201705:59	–	osv
Packet Storm	Sonicwall SRA 8.1.0.2-14sv Remote Command Execution	24 Feb 201700:00	–	packetstorm
Prion	Command injection	22 Feb 201705:59	–	prion
SonicWall	Dell SonicWall Secure Remote Access Multiple Command Injection Vulnerabilities	22 Feb 201705:59	–	sonicwall

NVD

Node

dell sonicwall_secure_remote_access_serverMatch8.1.0.2-14sv

Source	Link
securityfocus	www.securityfocus.com/bid/96375
documents	www.documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues
pastebin	www.pastebin.com/eJbeXgBr
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2016-0004

Parameter	Position	Path	Description	CWE
scriptname	nested	/cgi-bin/extensionsettings	Remote command injection via unsanitized scriptname in the extensionsettings CGI handling multipart form requests, enabling execution of arbitrary commands on the remote SRA appliance.	CWE-77

13 May 2026 00:24Current

9.7High risk

Vulners AI Score9.7

CVSS 39.8

CVSS 210

EPSS0.21972

CWE-77