CVE-2016-2397
CriticalSummary
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute unauthorized code, potentially leading to serious security breaches.
Recommendation
It is recommended to install Hotfix 168056 or upgrade to the latest version of the software to mitigate this vulnerability.
Other vulnerabilities in Dell SonicWALL GMS, Analyzer, UMA EM5000
See all- CVE-2015-3990High
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.
- CVE-2016-2396Critical
The GMS ViewPoint web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via configuration input.
Original NVD description (English source)
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.