CVE-2019-7478

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...

Global Management System (GMS) Unauthorized User SQL Injection

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1. CVE: CVE-2019-7478 Last updated: Dec. 30, 2019, 8 p.m...

Design/Logic Flaw

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...

CVE-2019-7476

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...

CVE-2019-7476

SonicWall Global Management System (GMS) is affected by CVE-2019-7476, allowing a remote attacker to gain access to the appliance by using an existing SSH key. Affected versions include GMS 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier. The connected documents do not provide detailed root-cause analys...

CVE-2019-7476

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...

Apache Struts & SonicWall’s GMS exploits key targets of Mirai & Gafgyt IoT malware

By Waqas Security researchers at Palo Alto Networks’ Unit 42 have discovered modified versions of the notorious Mirai and Gafgyt Internet of Things IoT malware. The malware have the capability of targeting flaws that affect Apache Struts and SonicWall Global Management System GMS. Moreover, the...

Code injection

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

CVE-2018-9866

SonicWall GMS (Global Management System) virtual appliances with version 8.1 and earlier are affected by CVE-2018-9866 due to lack of validation of user-supplied parameters passed to XML-RPC calls. This allows a remote attacker to execute arbitrary code on the vulnerable system. The issue affects...

SonicWall GMS XML-RPC Remote Code Execution Vulnerability

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier. CVE: CVE-2018-9866 Last updated: Aug. 3, 201...

Design/Logic Flaw

SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...

CVE-2018-5691

SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...

CVE-2018-5691

The CVE-2018-5691 entry concerns Dell SonicWall Global Management System (GMS) v8.1. Affected component: the /sgms/TreeControl module; vulnerability type: Cross-Site Scripting (XSS) via the values of newName and Name. Root cause is an input handling flaw that allows malicious script injection thr...

SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability

Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...

SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability

Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...

SonicWall GMS 8.1 Filter Bypass / Input Validation

Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...

Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...