71241vdb entry
http://www.securityfocus.com/bid/71241 CVE-2014-8420
SonicWall Global Management System XMLRPC set_time_zone Unauth RCE
Record summary
CVE-2014-8420 has a selected CVSS score of 9.0; EIP currently links 1 catalogued exploit.
Description
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
MetasploitSonicWall Global Management System XMLRPC set_time_zone Unauth RCEMetasploit exploitby Michael Flanders +1 moreNot analyzed1 file
References
5zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-14-385 dell-sonicwall-cve20148420-code-exec(98911)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-8420 support.software.dell.comConfirmation
https://support.software.dell.com/product-notification/136814