CVE-2016-2397: Command Injection

Published Feb 17, 2016

Updated

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

Affected Software

10 affected components

SonicWall Uma Em5000 Firmware=7.2

SonicWall Uma Em5000 Firmware=8.0

SonicWall Uma Em5000 Firmware=8.1

SonicWall UMA EM5000

SonicWall Analyzer=7.2

SonicWall Analyzer=8.0

SonicWall Analyzer=8.1

SonicWall Global Management System=7.2

SonicWall Global Management System=8.0

SonicWall Global Management System=8.1

Event History

Feb 17, 2016

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-2397?

CVE-2016-2397 is classified as a critical vulnerability because it allows remote attackers to execute arbitrary Java code.

How do I fix CVE-2016-2397?

You can fix CVE-2016-2397 by applying Hotfix 168056 or upgrading to a patched version of the affected SonicWALL products.

Which systems are affected by CVE-2016-2397?

CVE-2016-2397 affects Dell SonicWALL GMS, Analyzer, and UMA EM5000 versions 7.2, 8.0, and 8.1 before Hotfix 168056.

What types of attacks can be executed due to CVE-2016-2397?

Attackers exploiting CVE-2016-2397 can perform remote code execution by sending specially crafted XML data.

Is CVE-2016-2397 a local or remote vulnerability?

CVE-2016-2397 is a remote vulnerability, allowing exploitation without local access to the affected systems.