2061 matches found
CVE-2021-20026
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions...
CVE-2021-20026
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions...
Command injection
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions...
CVE-2021-20026
CVE-2021-20026 affects SonicWall NSM On-Prem; an authenticated attacker can perform OS command injection via a crafted HTTP request, impacting NSM On-Prem versions up to 2.2.0-R10 and earlier. Connected sources corroborate the vulnerability in SonicWall NSM On-Prem and indicate a fix was released...
CVE-2021-20026
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions...
SonicWall NSM On-Prem authenticated command injection vulnerability
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions. CVE: CVE-2021-20026 Last updated: May 27, 2021, 2:07 p.m...
SonicWall NSM On-Prem 操作系统命令注入漏洞
SonicWall NSM On-Prem is an application from Sonicwall USA, Inc. It provides unlimited scalability to support thousands of SonicWall security appliances under its management. SonicWall NSM On-Prem suffers from an operating system command injection vulnerability that can be exploited by an attacke...
CVE-2021-20025
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the...
Default credentials
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the...
CVE-2021-20025
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the...
CVE-2021-20025
CVE-2021-20025 affects SonicWall Email Security Virtual Appliance up to version 10.0.9 (and earlier) featuring a default username and a transitional password used at initial setup. An attacker could remotely access the appliance as root only when the device is freshly installed and not yet connec...
SonicWall Email Security Virtual Appliance Static Credential Vulnerability
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance only when the device i...
SonicWall Email Security Appliance 信任管理问题漏洞
Sonicwall SonicWall Email Security Appliance is an email security appliance from SonicWall USA. A vulnerability with trust management issues exists in the SonicWall Email Security Virtual Appliance prior to version 10.0.9. The vulnerability stems from the program containing a default username and...
The vulnerability of the implementation of the SSL VPN micro-programming software for network interfaces of the SMA 100 series, which allows a intruder to gain unauthorized access to protected information.
The vulnerability of the implementation of the SSL VPN micro-programming system for network interfaces of SONICWALL series SMA 100 is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...
The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security, related to insecure privilege management, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of SonicWall Email Security’s email security software lies in the improper restriction of the path to the restricted directory. This allows attackers to gain unauthorized access to the protected information.
The vulnerability of SonicWall Email Security’s email security software relates to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security allow for unlimited downloading of malicious files, enabling attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software lies in their ability to allow unlimited download of malicious files. Exploiting this vulnerability can enable a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Hackers Exploit SonicWall Zero-Day Bug in FiveHands Ransomware Attacks
An "aggressive" financially motivated threat group tapped into a zero-day flaw in SonicWall VPN appliances prior to it being patched by the company to deploy a new strain of ransomware called FIVEHANDS. The group, tracked by cybersecurity firm Mandiant as UNC2447, took advantage of an "improper S...
UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat
Mandiant has observed an aggressive financially motivated group, UNC2447, exploiting one SonicWall VPN zero-day vulnerability prior to a patch being available and deploying sophisticated malware previously reported by other vendors as SOMBRAT. Mandiant has linked the use of SOMBRAT to the...
