CVE-2016-2397 The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted X...
CriticalCVSS 9.8
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall uma em5000 firmware | = 7.2 | No fix listed |
| SonicWall uma em5000 firmware | = 8.0 | No fix listed |
| SonicWall uma em5000 firmware | = 8.1 | No fix listed |
| SonicWall analyzer | = 7.2 | No fix listed |
| SonicWall analyzer | = 8.0 | No fix listed |
| SonicWall analyzer | = 8.1 | No fix listed |
| SonicWall global management system | = 7.2 | No fix listed |
| SonicWall global management system | = 8.0 | No fix listed |
| SonicWall global management system | = 8.1 | No fix listed |
References
- 1035015 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory
- support.software.dell.com vendor-advisory