CVE-2012-2627 d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snm...
HighCVSS 9.4
EPSS 5.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall scrutinizer | < 9.5.0 | 9.5.0 |
References
- www.plixer.com broken-link
- www.trustwave.com third-party-advisory