Lucene search

[email protected]NVD:CVE-2016-2397

HistoryFeb 17, 2016 - 3:59 p.m.

CVE-2016-2397

2016-02-1715:59:07

CWE-77

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.097

Percentile

94.8%

JSON

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

Affected configurations

Nvd

Node

sonicwalluma_em5000_firmwareMatch7.2

sonicwalluma_em5000_firmwareMatch8.0

sonicwalluma_em5000_firmwareMatch8.1

AND

sonicwalluma_em5000Match-

Node

sonicwallanalyzerMatch7.2

sonicwallanalyzerMatch8.0

sonicwallanalyzerMatch8.1

sonicwallglobal_management_systemMatch7.2

sonicwallglobal_management_systemMatch8.0

sonicwallglobal_management_systemMatch8.1

VendorProductVersionCPE
sonicwalluma_em5000_firmware7.2cpe:2.3:o:sonicwall:uma_em5000_firmware:7.2:*:*:*:*:*:*:*
sonicwalluma_em5000_firmware8.0cpe:2.3:o:sonicwall:uma_em5000_firmware:8.0:*:*:*:*:*:*:*
sonicwalluma_em5000_firmware8.1cpe:2.3:o:sonicwall:uma_em5000_firmware:8.1:*:*:*:*:*:*:*
sonicwalluma_em5000-cpe:2.3:h:sonicwall:uma_em5000:-:*:*:*:*:*:*:*
sonicwallanalyzer7.2cpe:2.3:a:sonicwall:analyzer:7.2:*:*:*:*:*:*:*
sonicwallanalyzer8.0cpe:2.3:a:sonicwall:analyzer:8.0:*:*:*:*:*:*:*
sonicwallanalyzer8.1cpe:2.3:a:sonicwall:analyzer:8.1:*:*:*:*:*:*:*
sonicwallglobal_management_system7.2cpe:2.3:a:sonicwall:global_management_system:7.2:*:*:*:*:*:*:*
sonicwallglobal_management_system8.0cpe:2.3:a:sonicwall:global_management_system:8.0:*:*:*:*:*:*:*
sonicwallglobal_management_system8.1cpe:2.3:a:sonicwall:global_management_system:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sonicwall	uma_em5000_firmware	7.2	cpe:2.3:o:sonicwall:uma_em5000_firmware:7.2:::::::*
sonicwall	uma_em5000_firmware	8.0	cpe:2.3:o:sonicwall:uma_em5000_firmware:8.0:::::::*
sonicwall	uma_em5000_firmware	8.1	cpe:2.3:o:sonicwall:uma_em5000_firmware:8.1:::::::*
sonicwall	uma_em5000	-	cpe:2.3:h:sonicwall:uma_em5000:-:::::::*
sonicwall	analyzer	7.2	cpe:2.3:a:sonicwall:analyzer:7.2:::::::*
sonicwall	analyzer	8.0	cpe:2.3:a:sonicwall:analyzer:8.0:::::::*
sonicwall	analyzer	8.1	cpe:2.3:a:sonicwall:analyzer:8.1:::::::*
sonicwall	global_management_system	7.2	cpe:2.3:a:sonicwall:global_management_system:7.2:::::::*
sonicwall	global_management_system	8.0	cpe:2.3:a:sonicwall:global_management_system:8.0:::::::*
sonicwall	global_management_system	8.1	cpe:2.3:a:sonicwall:global_management_system:8.1:::::::*

References

www.securitytracker.com/id/1035015

www.zerodayinitiative.com/advisories/ZDI-16-163

support.software.dell.com/product-notification/185943

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.097

Percentile

94.8%

JSON

Related for NVD:CVE-2016-2397

prion1 zdi1 cvelist1 cve1