CVE-2015-3990

Dell Sonicwall GMS <7.2 SP4 - Command Injection

Title source: llm
STIX 2.1

Description

The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032373
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-15-231/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/74756

Scores

EPSS 0.0058
EPSS Percentile 69.2%

Details

CWE
CWE-19
Status published
Products (3)
sonicwall/analyzer < 7.2
sonicwall/global_management_system < 7.2
sonicwall/uma_em5000_firmware < 7.2
Published May 20, 2015
Tracked Since Feb 18, 2026