Multiple Dell SonicWALL Products CVE-2015-3990 Remote Code Execution Vulnerability

Bugtraq ID:	74756
Class:	Unknown
CVE:	CVE-2015-3990
Remote:	Yes
Local:	No
Published:	May 21 2015 12:00AM
Updated:	May 21 2015 12:00AM
Credit:	kernelsmith of The Zero Day Initiative
Vulnerable:
Not Vulnerable:

Multiple Dell SonicWALL Products CVE-2015-3990 Remote Code Execution Vulnerability

Multiple Dell SonicWALL Products are prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the affected device. Successful exploitation can completely compromise the vulnerable device.

The following products are vulnerable:

Dell SonicWALL Global Management System
Dell SonicWALL Analyzer
Dell SonicWALL Universal Managemnet Appliance

Multiple Dell SonicWALL Products CVE-2015-3990 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Dell SonicWALL Products CVE-2015-3990 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Dell SonicWALL Products CVE-2015-3990 Remote Code Execution Vulnerability

References: