CVE-2015-3990
HighSummary
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover by remote users.
Recommendation
It is recommended to upgrade to version 7.2 SP4 or later to mitigate this vulnerability.
Other vulnerabilities in Dell Sonicwall GMS, Analyzer, UMA EM5000
See all- CVE-2016-2397Critical
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
- CVE-2016-2396Critical
The GMS ViewPoint web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via configuration input.
Original NVD description (English source)
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.