Dell SonicWall SonicOS 'macIpSpoofView.html' Multiple Cross Site Scripting Vulnerabilities
BID:74406
Info
Dell SonicWall SonicOS 'macIpSpoofView.html' Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 74406 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-3447 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 23 2015 12:00AM |
| Updated: | Apr 23 2015 12:00AM |
| Credit: | Vulnerability Laboratory |
| Vulnerable: |
Dell SonicWALL SonicOS 7.5.0.12 Dell SonicWALL SonicOS 6.0 |
| Not Vulnerable: | |
Discussion
Dell SonicWall SonicOS 'macIpSpoofView.html' Multiple Cross Site Scripting Vulnerabilities
Dell SonicWall SonicOS is prone to multiple cross-site scripting vulnerabilities
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
SonicOS 7.5.0.12 and 6.0 are vulnerable.
Dell SonicWall SonicOS is prone to multiple cross-site scripting vulnerabilities
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
SonicOS 7.5.0.12 and 6.0 are vulnerable.
Exploit / POC
Dell SonicWall SonicOS 'macIpSpoofView.html' Multiple Cross Site Scripting Vulnerabilities
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Dell SonicWall SonicOS 'macIpSpoofView.html' Multiple Cross Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Dell SonicWall SonicOS 'macIpSpoofView.html' Multiple Cross Site Scripting Vulnerabilities
References:
References:
- Dell SonicWALL SonicOS HomePage (SonicWaLL)
- SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerabilit (Security Focus)