Lucene search

[email protected]CVE-2013-1360

HistoryFeb 11, 2020 - 4:15 p.m.

CVE-2013-1360

2020-02-1116:15:12

CWE-287

[email protected]

web.nvd.nist.gov

cve-2013-1360

dell

sonicwall

gms

analyzer

uma

viewpoint

authentication bypass

vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.212 Low

EPSS

Percentile

96.5%

JSON

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.

Affected configurations

NVD

Node

sonicwallanalyzerMatch7.0

sonicwallglobal_management_systemMatch4.1

sonicwallglobal_management_systemMatch5.0

sonicwallglobal_management_systemMatch5.1

sonicwallglobal_management_systemMatch6.0

sonicwallglobal_management_systemMatch7.0

sonicwalluniversal_management_applianceMatch5.1

sonicwalluniversal_management_applianceMatch6.0

sonicwalluniversal_management_applianceMatch7.0

sonicwallviewpointMatch4.1

sonicwallviewpointMatch5.0

sonicwallviewpointMatch6.0

CPENameOperatorVersion
sonicwall:analyzersonicwall analyzereq7.0
sonicwall:global_management_systemsonicwall global management systemeq4.1
sonicwall:global_management_systemsonicwall global management systemeq5.0
sonicwall:global_management_systemsonicwall global management systemeq5.1
sonicwall:global_management_systemsonicwall global management systemeq6.0
sonicwall:global_management_systemsonicwall global management systemeq7.0
sonicwall:universal_management_appliancesonicwall universal management applianceeq5.1
sonicwall:universal_management_appliancesonicwall universal management applianceeq6.0
sonicwall:universal_management_appliancesonicwall universal management applianceeq7.0
sonicwall:viewpointsonicwall viewpointeq4.1

CPE	Name	Operator	Version
sonicwall:analyzer	sonicwall analyzer	eq	7.0
sonicwall:global_management_system	sonicwall global management system	eq	4.1
sonicwall:global_management_system	sonicwall global management system	eq	5.0
sonicwall:global_management_system	sonicwall global management system	eq	5.1
sonicwall:global_management_system	sonicwall global management system	eq	6.0
sonicwall:global_management_system	sonicwall global management system	eq	7.0
sonicwall:universal_management_appliance	sonicwall universal management appliance	eq	5.1
sonicwall:universal_management_appliance	sonicwall universal management appliance	eq	6.0
sonicwall:universal_management_appliance	sonicwall universal management appliance	eq	7.0
sonicwall:viewpoint	sonicwall viewpoint	eq	4.1

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/bugtraq/2013-01/0075.html

www.exploit-db.com/exploits/24203

www.securityfocus.com/bid/57446

www.securitytracker.com/id/1028007

exchange.xforce.ibmcloud.com/vulnerabilities/81366

packetstormsecurity.com/files/cve/CVE-2013-1360

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.212 Low

EPSS

Percentile

96.5%

JSON

Related for CVE-2013-1360

prion1 packetstorm1 cvelist1 exploitpack1 securityvulns2 nvd1 exploitdb1 openvas1