CVE-2012-2626

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action...

Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypass (CVE-2012-2626)

An authentication bypass vulnerability has been reported in Plixer Scrutinizer NetFlow and sFlow Analyzer...

CVE-2012-2626

The Plixer Scrutinizer (also known as Dell SonicWALL Scrutinizer ) web console is vulnerable to an authentication bypass in the cgi-bin/admin.cgi script. This flaw occurs because the script does not require token authentication , allowing remote attackers to perform a userprefs action to add new ...

CVE-2012-2626

creationtimestamp| type| source ---|---|--- 2012-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37549 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/scrutinizeradduser.rb 2025-02-06 03:13:40+00:00| see...

Plixer Scrutinizer NetFlow and sFlow Analyzer HTTP Authentication Bypass

This will add an administrative account to Scrutinizer NetFlow and sFlow Analyzer without any authentication. Versions such as 9.0.1 or older are affected. Module Options msf use auxiliary/admin/http/scrutinizer/adduser msf undefinedadduser show actions ...actions... msf undefinedadduser set ACTI...