CVE-2014-8420
SonicWALL Analyzer < 7.2 SP2 - Authenticated Remote Code Execution
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-8420.
PoCs published by Michael Flanders, kernelsmith, including Metasploit module exploits/unix/sonicwall/sonicwall_xmlrpc_rce.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated command injection vulnerability in SonicWall Global Management System Virtual Appliance via XML-RPC. The exploit sends a malicious XML payload to trigger command execution in the context of the vulnerable service.
Description
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Exploits (1)
This Metasploit module exploits an unauthenticated command injection vulnerability in SonicWall Global Management System Virtual Appliance via XML-RPC. The exploit sends a malicious XML payload to trigger command execution in the context of the vulnerable service.