CVEvulnerability
CVE-2014-8420
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Affected configurations
• sonicwall analyzer 7.2
• sonicwall global management system 7.2
• sonicwall uma em5000
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/71241 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-14-385/ Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 VDB Entry
- https://support.software.dell.com/product-notification/136814 Vendor Advisory
- http://www.securityfocus.com/bid/71241 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-14-385/ Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 VDB Entry
- https://support.software.dell.com/product-notification/136814 Vendor Advisory