CVE-2015-3990 - The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration

Back Back to CVE browser

HIGH

The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration

Published May 20, 2015

9.0

HIGH

CVSS 2.0

EPSS 2.67%

Description

The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-19

References (4)

http://www.securityfocus.com/bid/74756
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032373
vdb-entryx_refsource_SECTRACK
http://www.zerodayinitiative.com/advisories/ZDI-15-231/
x_refsource_MISC
https://support.software.dell.com/product-notification/152178
x_refsource_CONFIRM

Link	Providers	Tags
http://www.securityfocus.com/bid/74756		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032373		vdb-entryx_refsource_SECTRACK
http://www.zerodayinitiative.com/advisories/ZDI-15-231/		x_refsource_MISC
https://support.software.dell.com/product-notification/152178		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner zdi

Published May 20, 2015

Updated Aug 6, 2024

Reserved May 15, 2015

Link CVE-2015-3990

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-3990

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-3990