CVE-2016-2397
Summary
| CVE | CVE-2016-2397 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-02-17 15:59:00 UTC |
| Updated | 2018-03-12 17:31:00 UTC |
| Description | The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data. |
Risk And Classification
Problem Types: CWE-77
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sonicwall | Analyzer | 7.2 | All | All | All |
| Application | Sonicwall | Analyzer | 8.0 | All | All | All |
| Application | Sonicwall | Analyzer | 8.1 | All | All | All |
| Application | Sonicwall | Analyzer | 7.2 | All | All | All |
| Application | Sonicwall | Analyzer | 8.0 | All | All | All |
| Application | Sonicwall | Analyzer | 8.1 | All | All | All |
| Application | Sonicwall | Global Management System | 7.2 | All | All | All |
| Application | Sonicwall | Global Management System | 8.0 | All | All | All |
| Application | Sonicwall | Global Management System | 8.1 | All | All | All |
| Application | Sonicwall | Global Management System | 7.2 | All | All | All |
| Application | Sonicwall | Global Management System | 8.0 | All | All | All |
| Application | Sonicwall | Global Management System | 8.1 | All | All | All |
| Hardware | Sonicwall | Uma Em5000 | - | All | All | All |
| Hardware | Sonicwall | Uma Em5000 | - | All | All | All |
| Operating System | Sonicwall | Uma Em5000 Firmware | 7.2 | All | All | All |
| Operating System | Sonicwall | Uma Em5000 Firmware | 8.0 | All | All | All |
| Operating System | Sonicwall | Uma Em5000 Firmware | 8.1 | All | All | All |
| Operating System | Sonicwall | Uma Em5000 Firmware | 7.2 | All | All | All |
| Operating System | Sonicwall | Uma Em5000 Firmware | 8.0 | All | All | All |
| Operating System | Sonicwall | Uma Em5000 Firmware | 8.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.software.dell.com/product-notification/185943 | CONFIRM | support.software.dell.com | Vendor Advisory |
| Dell SonicWALL GMS Virtual Appliance Bugs Let Remote and Remote Authenticated Users Execute Arbitrary Code - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Zero Day Initiative | MISC | www.zerodayinitiative.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.