Code injection

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data...

CVE-2016-2396

CVE-2016-2396 affects Dell SonicWALL GMS ViewPoint (GMSVP) web app used by Dell SonicWALL GMS/Analyzer/UMA EM5000 versions 7.2, 8.0, 8.1 prior to Hotfix 168056. Affected component is the GMSVP web interface where input in configuration fields is not safely sanitized, allowing a remote authenticat...

CVE-2016-2397

The CVE-2016-2397 entry concerns the cliserver component in Dell SonicWALL GMS, Analyzer, and UMA EM5000 (versions 7.2, 8.0, 8.1 prior to Hotfix 168056). The vulnerability allows remote attackers to deserialize XML data and execute arbitrary Java code on affected systems. The underlying issue is ...

CVE-2016-2397

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data...

CVE-2016-2397: Improper Neutralization of Special Elements used in a Command

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data...

PT-2016-2697

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS versions 7.2 through 8.1 before Hotfix 168056 Dell SonicWALL Analyzer versions 7.2 through 8.1 before Hotfix 168056 Dell SonicWALL UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056 Description The issue is related to...

PT-2016-5154

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2 through 8.1 before Hotfix 168056 Description The issue allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. This is related to the...

Dell Sonicwall GMS AnalyzerUMA EM5000 Arbitrary Command Execution Vulnerability

The Dell Sonicwall GMS AnalyzerUMA EM5000 is the Analyzer module of the centralized GMS platform for Dell's SonicWALL security products. An arbitrary command execution vulnerability exists in the Dell Sonicwall GMS, Analyzer,UMA EM5000 that could allow an authenticated remote user to execute...

Design/Logic Flaw

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration...

CVE-2015-3990

CVE-2015-3990 affects the Dell SonicWall GMS suite (GMS ViewPoint web app) on GMS, Analyzer, and UMA EM5000 prior to 7.2 SP4. Affected component: GMSVP web application; vulnerability enables remote authenticated users to execute arbitrary commands via configuration-related input handling. Root ca...

CVE-2015-3990: Undefined Security Weakness

The GMS ViewPoint GMSVP web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration...

PT-2015-6376

Name of the Vulnerable Software and Affected Versions Dell Sonicwall GMS, Analyzer, and UMA EM5000 versions prior to 7.2 SP4 Description The issue allows remote authenticated users to execute arbitrary commands, related to configuration vectors in the GMS ViewPoint web application. Recommendation...

CVE-2014-8420

The ViewPoint web application in Dell SonicWALL Global Management System GMS before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors...

Multiple Dell SonicWALL Products CVE-2014-8420 Multiple Remote Code Execution Vulnerabilities

The ViewPoint web application in Dell SonicWALL Global Management System GMS before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors. CVE: CVE-2014-8420 Last updated: March 12, 2018, 5:...

CVE-2014-8420

CVE-2014-8420 affects Dell SonicWALL GMS suite: ViewPoint web application in GMS, SonicWALL Analyzer, and SonicWALL UMA up to version 7.2 SP2. The vulnerability is a remote code execution flaw in the ViewPoint component, arising from insufficient input/config handling, allowing a remote authentic...

CVE-2014-8420

The ViewPoint web application in Dell SonicWALL Global Management System GMS before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2014-8420: Improper Input Validation

The ViewPoint web application in Dell SonicWALL Global Management System GMS before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors...

PT-2014-8516

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Global Management System GMS versions prior to 7.2 SP2 SonicWALL Analyzer versions prior to 7.2 SP2 SonicWALL UMA versions prior to 7.2 SP2 Description The issue allows remote authenticated users to execute arbitrary code via...

CVE-2014-5024

CVE-2014-5024 is a cross-site scripting (XSS) vulnerability in Dell SonicWALL GMS, Analyzer, and UMA, affecting the sgms/panelManager component. The issue allows remote attackers to inject arbitrary web script or HTML via the node_id parameter. The vulnerability is described in several connected ...

PT-2014-6256

Name of the Vulnerable Software and Affected Versions Dell SonicWALL GMS, Analyzer, and UMA versions prior to 7.2 SP1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the node id parameter. This could potentially lead to unauthorized...