CVE-2016-9683

The CVE-2016-9683 issue affects Dell SonicWall Secure Remote Access Server (SRA) version 8.1.0.2-14sv, specifically the extensionsettings CGI (/cgi-bin/extensionsettings). The vulnerability stems from unsanitized handling of the scriptname parameter in a multi-part form, which is read before a ca...

CVE-2016-9682

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

CVE-2016-9684

Dell SonicWALL Secure Remote Access (SRA) server, version 8.1.0.2-14sv, is vulnerable to a remote command injection in the web admin CGI at /cgi-bin/viewcert. The CGI does not properly escape the CERT input before a system() call, enabling an attacker to execute arbitrary shell commands and gain ...

CVE-2016-9684

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

CVE-2016-9682

The provided connected sources confirm CVE-2016-9682 affects SonicWall Secure Remote Access (SRA) 8.1.0.2-14sv. The vulnerabilities are remote command injections in the diagnostics CGI (/cgi-bin/diagnostics) used for emailing system state. Root cause: the application fails to properly escape data...

Dell SonicWALL SMA 100 / SRA Series CSRF Vulnerability (SNWLID-2015-0001)

Dell SonicWALL SMA 100 Series and SRA Series appliances are prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SonicWall/Dell SonicWALL TZ Detection (SNMP)

SNMP based detection of SonicWall formerly Dell SonicWALL TZ devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell SonicWALL TZ 100 < 5.9.1.0-22o DoS Vulnerability

Dell SonicWALL TZ 100 is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

SonicWall Global Management System (GMS) / Universal Management Suite (USM) / Analyzer / Analytics Detection (HTTP)

HTTP based detection of Dell SonicWALL Global Management System GMS / Universal Management Suite USM / Analyzer / Analytics. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SonicWALL GMS / Analyzer 8.x < 8.2 Multiple SQLi Vulnerabilities

SonicWALL GMS / Analyzer are prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

SonicWall / Dell SonicWALL SMA / SRA Detection (SNMP)

SNMP based detection of SonicWall / Dell SonicWALL Secure Mobile Access SMA and Secure Remote Access SRA devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Dell SonicWALL SMA 100 Series 8.1 XSS / CSRF Vulnerability (ZSL-2016-5392)

Dell SonicWALL SMA 100 Series appliances are prone to a cross-site scripting XSS / cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SonicWALL Global Management System (GMS) 8.x < 8.2 Multiple Vulnerabilities

The version of SonicWALL Global Management System GMS running on the remote host is 8.x prior to 8.2. It is, therefore, affected by multiple vulnerabilities : - A SQL injection SQLi vulnerability exists in the ImagePreviewServlet servlet due to improper sanitization of user-supplied input to the...

Dell SonicWALL Network Security Appliance NSA 6600 XSS Vulnerability

Dell SonicWALL Network Security Appliance NSA 6600 suffers from a reflective cross site scripting vulnerability. Versions affected include NSA 6600 running SonicOS Enhanced 6.2.4.3-31n, WXA 4000 running 1.3.2.0-07, and SafeMode 6.1.0.11. i? Dell SonicWALL Network Security Appliance NSA 6600...

Dell SonicWALL Global Management System GMS 8.1 Cross Site Scripting Vulnerability

Dell SonicWALL Global Management System GMS version 8.1 suffers from multiple cross site scripting vulnerabilities. i? Dell SonicWALL Global Management System GMS 8.1 XSS Vulnerabilities Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8....

Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vulnerability

Dell SonicWALL GMS versions 8.1 and below are compiled with a vulnerable version of Adobe Flex SDK allowing for same-origin request forgery and cross-site content hijacking i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page:...

Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit for hardware platform in category web applications Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/secure-mobile-access/ Affected version: 8.1 SSL-VPN Summary: Keep up with the demands of today’s remote...

Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection Vulnerability

Exploit for hardware platform in category web applications Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Fixed in...

Dell SonicWALL Global Management System GMS 8.1 Cross Site Scripting

i? Dell SonicWALL Global Management System GMS 8.1 XSS Vulnerabilities Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Analyzer Virtual Appliance Fixed in: 8.2 VR-2016-01-C1D Summary:...