Lucene search
HistoryMay 20, 2015 - 6:59 p.m.
CVE-2015-3990
cve-2015-3990
gms viewpoint
dell sonicwall
gms
analyzer
uma em5000
remote command execution
security vulnerability
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.112 Low
EPSS
Percentile
95.2%
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.
Affected configurations
Node
sonicwalluma_em5000_firmwareRange≤7.2
sonicwalluma_em5000Match-
Node
sonicwallanalyzerRange≤7.2
ORsonicwallglobal_management_systemRange≤7.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonicwall:uma_em5000_firmware | sonicwall uma em5000 firmware | le | 7.2 |
Related
nvd
nvd
CVE-2015-3990
2015-05-20 18:59:05
cvelist
cvelist
CVE-2015-3990
2015-05-20 18:00:00
zdi
zdi
prion
prion
Design/Logic Flaw
2015-05-20 18:59:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.112 Low
EPSS
Percentile
95.2%
Related for CVE-2015-3990