388 matches found
CVE-2022-22280: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions...
SonicWall urges customers to patch critical SQL injection bug ASAP
Cybersecurity hardware company, SonicWall, recently released a public security notice about a critical SQL injection flaw affecting its GMS Global Management System and Analytics On-Prem products. The flaw, which is tracked as CVE-2022-22280, is given a 9.4 critical rating. With the high capabili...
SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products
Network security company SonicWall on Friday rolled out fixes to mitigate a critical SQL injection SQLi vulnerability affecting its Analytics On-Prem and Global Management System GMS products. The vulnerability, tracked as CVE-2022-22280, is rated 9.4 for severity on the CVSS scoring system and...
Unauthenticated SQL Injection in SonicWall GMS and Analytics
Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS and Analytics On-Prem. CVE: CVE-2022-22280 Last updated: Oct. 13, 2022, 7:30 p.m...
PT-2022-3851 · Sonicwall · Sonicwall Analytics On-Prem +1
Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.1-SP2-Hotfix1 and earlier SonicWall Analytics On-Prem versions 2.5.0.3-2520 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, leading to an...
kazino-gms-deluxe.com Cross Site Scripting vulnerability OBB-2323645
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
Command injection
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
CVE-2021-20020
CVE-2021-20020 affects SonicWall Global Management System (GMS) 9.3 . The vulnerability is described as a remote, unauthenticated command execution that leads to local privilege escalation to root on the appliance. Connected sources corroborate a high-severity, network-exposed issue with root-lev...
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
SonicWall GMS 9.3 unauthenticated remote command execution vulnerability
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root. CVE: CVE-2021-20020 Last updated: April 10, 2021, 1:08 a.m...
PT-2021-13727
Name of the Vulnerable Software and Affected Versions: SonicWall GMS version 9.3 Description: A command execution issue allows a remote unauthenticated attacker to locally escalate privilege to root. Recommendations: For SonicWall GMS version 9.3, at the moment, there is no information about a...
CVE-2021-20020: Improper Authentication
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
CVE-2013-1360
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...
CVE-2013-1360
This CVE affects DELL SonicWALL GMS, Analyzer, UMA, and ViewPoint products. A crafted request to the SGMS interface (/sgms/) allows an unauthenticated remote attacker to bypass authentication and gain full administrative access to the web interface, potentially compromising all managed appliances...
PT-2020-7344
Name of the Vulnerable Software and Affected Versions: DELL SonicWALL Analyzer version 7.0 DELL SonicWALL Global Management System GMS versions 4.1 through 7.0 DELL SonicWALL Universal Management Appliance UMA versions 5.1 through 7.0 DELL SonicWALL ViewPoint versions 4.1 through 6.0 Description:...
CVE-2019-7478
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...