Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
BID:68495
Info
Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
| Bugtraq ID: | 68495 |
| Class: | Unknown |
| CVE: |
CVE-2014-4976 CVE-2014-4977 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2014 12:00AM |
| Updated: | Jul 24 2014 12:09AM |
| Credit: | Brandon Perry |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
Dell SonicWALL Scrutinizer is prone to multiple security vulnerabilities, including:
1. A privilege-escalation vulnerability
2. Multiple SQL-injection vulnerabilities
Attackers can exploit these issues to perform certain actions with elevated privileges, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible.
Dell SonicWALL Scrutinizer is prone to multiple security vulnerabilities, including:
1. A privilege-escalation vulnerability
2. Multiple SQL-injection vulnerabilities
Attackers can exploit these issues to perform certain actions with elevated privileges, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible.
Exploit / POC
Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Dell SonicWALL Scrutinizer Multiple Security Vulnerabilities
References:
References: