Dell SonicWall Secure Remote Access Multiple Command Injection Vulnerabilities

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

CVE-2016-9683

The CVE-2016-9683 issue affects Dell SonicWall Secure Remote Access Server (SRA) version 8.1.0.2-14sv, specifically the extensionsettings CGI (/cgi-bin/extensionsettings). The vulnerability stems from unsanitized handling of the scriptname parameter in a multi-part form, which is read before a ca...