CVE-2012-2626 cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative acco...
MediumCVSS 5.0
EPSS 44.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall scrutinizer | < 9.5.0 | 9.5.0 |
References
- www.plixer.com broken-link third-party-advisory
- www.trustwave.com exploit third-party-advisory