Sonicwall

Scrutinizer

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2014-4976

Exploit
  • EPSS 3.13%
  • Veröffentlicht 16.07.2014 14:19:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi.

6.5

CVE-2014-4977

Exploit
  • EPSS 84.48%
  • Veröffentlicht 16.07.2014 14:19:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_i...

4.3

CVE-2012-3848

Exploit
  • EPSS 0.57%
  • Veröffentlicht 31.07.2012 10:45:42
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2...

7.5

CVE-2012-3951

Exploit
  • EPSS 79.5%
  • Veröffentlicht 31.07.2012 10:45:42
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands v...

5

CVE-2012-2626

Exploit
  • EPSS 75.98%
  • Veröffentlicht 31.07.2012 10:45:41
  • Zuletzt bearbeitet 11.04.2025 00:51:21

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.

9.4

CVE-2012-2627

  • EPSS 9.55%
  • Veröffentlicht 31.07.2012 10:45:41
  • Zuletzt bearbeitet 11.04.2025 00:51:21

d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.

6.5

CVE-2012-2962

Exploit
  • EPSS 90.34%
  • Veröffentlicht 30.07.2012 22:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.