CVE-2016-2397

Critical

Published: 17/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute unauthorized code, potentially leading to serious security breaches.

Recommendation

It is recommended to install Hotfix 168056 or upgrade to the latest version of the software to mitigate this vulnerability.

Original NVD description (English source)

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.