CVE-2015-3990: Critical severity sonicwall uma em5000 vulnerability
Published May 20, 2015
·Updated
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.
Affected Software
4 affected components
SonicWall Uma Em5000 Firmware<=7.2
SonicWall UMA EM5000
SonicWall Analyzer<=7.2
SonicWall Global Management System<=7.2
Event History
May 20, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2015-3990?
CVE-2015-3990 is rated as high severity due to potential unauthorized command execution by remote authenticated users.
2
How do I fix CVE-2015-3990?
To fix CVE-2015-3990, upgrade the affected SonicWall software to version 7.2 SP4 or later.
3
Who is affected by CVE-2015-3990?
CVE-2015-3990 affects users of Dell SonicWall GMS, Analyzer, and UMA EM5000 running versions prior to 7.2 SP4.
4
What type of vulnerability is CVE-2015-3990?
CVE-2015-3990 is a command injection vulnerability that allows remote authenticated users to execute arbitrary commands.
5
Can CVE-2015-3990 be exploited remotely?
Yes, CVE-2015-3990 can be exploited remotely by authenticated users with access to the web application.