The vulnerability of the “extensionsettings” component of the CGI application for the web interface of the Sonicwall Secure Remote Access server management system allows a hacker to execute arbitrary commands.

The vulnerability of the “extensionsettings” /cgi-bin/extensionsettings component of the CGI application for the web interface of the Dell Inc. Sonicwall Secure Remote Access SRA system management application is related to the lack of measures for cleaning input data. Exploiting this vulnerabilit...

Dell SonicWall Secure Remote Access Server Command Injection Vulnerability (CNVD-2017-02472)

Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the extensionsettings CGI /cgi-bin/extensionsettings component of the Dell SonicWall Secure Remote Access's web...

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

PT-2017-3170

Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access server version 8.1.0.2-14sv Description The vulnerability occurs in the 'extensionsettings' CGI component, specifically in the /cgi-bin/extensionsettings API endpoint, which handles internal server configurations...

CVE-2016-9683: Improper Neutralization of Special Elements used in a Command

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...