CVE-2016-9684: Command Injection
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9684?
CVE-2016-9684 is classified as a critical severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2016-9684?
To fix CVE-2016-9684, upgrade the SonicWall Secure Remote Access Server to a version higher than 8.1.0.2-14sv that addresses this vulnerability.
What are the risks associated with CVE-2016-9684?
The risks include unauthorized remote access and control over the affected SonicWall device, leading to potential data breaches.
Which versions of SonicWall are affected by CVE-2016-9684?
CVE-2016-9684 affects SonicWall Secure Remote Access Server version 8.1.0.2-14sv.
What is the exploit method for CVE-2016-9684?
The exploit method for CVE-2016-9684 involves sending crafted requests to the 'viewcert' CGI component to execute arbitrary commands on the server.