VulnerabilityModified
CVE-2016-2397
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
CRITICAL 9.8EPSS 6.44%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 6.44% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-77
- Affected
- sonicwall/uma em5000 firmware · sonicwall/analyzer · sonicwall/global management system
- Source
- cve@mitre.org
References
- http://www.securitytracker.com/id/1035015Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-16-163Third Party Advisory
- https://support.software.dell.com/product-notification/185943Vendor Advisory
- http://www.securitytracker.com/id/1035015Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-16-163Third Party Advisory
- https://support.software.dell.com/product-notification/185943Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.