CVE-2014-8420

The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

23.99% chance of exploitation in the next 30 days, 98th percentile

Published

2014-11-25

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/sonicwall/sonicwall_xmlrpc_…

References

• CVE Record
• NVD entry

Related

• CVE-2014-8393
• CVE-2014-8423
• CVE-2014-8391
• CVE-2014-8424
• CVE-2014-8390
• CVE-2014-8425