Lucene search

K
zdiKernelsmith - HP Zero Day InitiativeZDI-15-231
HistoryMay 15, 2015 - 12:00 a.m.

Dell Sonicwall GMS Virtual Appliance Multiple Remote Code Execution Vulnerabilities

2015-05-1500:00:00
kernelsmith - HP Zero Day Initiative
www.zerodayinitiative.com
14

EPSS

0.125

Percentile

95.5%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Dell SonicWALL Global Management System (GMS) virtual appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the GMS ViewPoint (GMSVP) web application. The issue lies in the handling of configuration input due to a failure to safely sanitize user data before executing a command. An attacker could leverage this vulnerability to execute code with root privileges on the underlying operating system.

EPSS

0.125

Percentile

95.5%

Related for ZDI-15-231