10

CVE-2013-1360

Exploit

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.

Data is provided by the National Vulnerability Database (NVD)
Sonicwall ≫ Analyzer Version7.0
Sonicwall ≫ Viewpoint Version4.1
Sonicwall ≫ Viewpoint Version5.0
Sonicwall ≫ Viewpoint Version6.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 57.72% 0.979
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.exploit-db.com/exploits/24203
Third Party Advisory
Exploit
VDB Entry
http://www.securityfocus.com/bid/57446
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1028007
Third Party Advisory
VDB Entry