CVE-2016-2397: Improper Neutralization of Special Elements used in a Command

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data...

CVE-2016-2396: Improper Neutralization of Special Elements used in a Command

The GMS ViewPoint GMSVP web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input...

PT-2016-5154

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056 Description The issue allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. This is related to the...

Dell SonicWALL GMS Virtual Appliance Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell SonicWALL GMS Virtual Appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the cliserver implementation, which accepts, deserializes, and...

PT-2016-2697

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS versions 7.2 through 8.1 before Hotfix 168056 Dell SonicWALL Analyzer versions 7.2 through 8.1 before Hotfix 168056 Dell SonicWALL UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056 Description The issue is related to...

Dell SonicWALL GMS Virtual Appliance Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell SonicWALL GMS Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the GMS ViewPoint GMSVP web application. The issue lies in the handli...

CVE-2014-3260

Pacom 1000 CCU and RTU GMS devices allow remote attackers to spoof the controller-to-base data stream by leveraging improper use of cryptography...

CVE-2014-3260

Pacom 1000 CCU and RTU GMS devices allow remote attackers to spoof the controller-to-base data stream by leveraging improper use of cryptography...

CVE-2014-3260

Affected product: Pacom 1000 CCU and RTU GMS systems. Vulnerability: CVE-2014-3260 arises from cryptographic implementation weaknesses in Pacom GMS, enabling remote attackers to spoof the controller–base data stream. Root cause: improper use of cryptography in the crypto implementation (CWE-310)....

CVE-2014-3260: Undefined Security Weakness

Pacom 1000 CCU and RTU GMS devices allow remote attackers to spoof the controller-to-base data stream by leveraging improper use of cryptography...

PT-2015-3720

Name of the Vulnerable Software and Affected Versions Pacom 1000 CCU and RTU GMS devices affected versions not specified Description The issue allows remote attackers to spoof the controller-to-base data stream by leveraging improper use of cryptography. Recommendations At the moment, there is no...

Pacom 1000 CCU GMS System Cryptographic Implementation Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on December 3, 2015, and is being released to the ICS-CERT web site. Swedish companies XPD and Assured found several crypto implementation flaws in the Pacom GMS system. Pacom has not produced a patch to mitigate...

CVE-2015-3990

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration...

Design/Logic Flaw

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration...

Multiple Dell SonicWALL Products CVE-2015-3990 Remote Code Execution Vulnerability

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration. CVE: CVE-2015-3990 Last updated: March 13, 2018, 8:25 p.m...

CVE-2015-3990

CVE-2015-3990 affects the Dell SonicWall GMS suite (GMS ViewPoint web app) on GMS, Analyzer, and UMA EM5000 prior to 7.2 SP4. Affected component: GMSVP web application; vulnerability enables remote authenticated users to execute arbitrary commands via configuration-related input handling. Root ca...

CVE-2015-3990

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration...

CVE-2015-3990: Undefined Security Weakness

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration...

PT-2015-6376

Name of the Vulnerable Software and Affected Versions Dell Sonicwall GMS, Analyzer, and UMA EM5000 versions prior to 7.2 SP4 Description The issue allows remote authenticated users to execute arbitrary commands, related to configuration vectors in the GMS ViewPoint web application. Recommendation...

Dell Sonicwall GMS Virtual Appliance Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Dell SonicWALL Global Management System GMS virtual appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the GMS ViewPoint GMSVP web application...