CVE-2016-9684
Sonicwall 8.1.0.2-14sv - 'viewcert.cgi' Remote Command Injection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
El servidor SonicWall Secure Remote Access (version 8.1.0.2-14sv) es vulnerable a una vulnerabilidad de Inyección Remota de Comandos en su interfaz administrativa web. Esta vulnerabilidad tiene lugar en el componente 'viewcert' CGI (/cgi-bin/viewcert) responsable del procesamiento de la información del certificado SSL. La aplicación CGI no escapa adecuadamente de la información pasada en la variable 'CERT' antes de que se realice una llamada al sistema() - permitiendo la inyección remota de comandos. La explotación de esta vulnerabilidad genera acceso shell a la máquina remota bajo la cuenta de usuario "nobody".
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-11-30 CVE Reserved
- 2016-12-24 First Exploit
- 2017-02-22 CVE Published
- 2024-04-16 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://pastebin.com/g1e2qU6N | X_refsource_misc | |
http://www.securityfocus.com/bid/96375 | Vdb Entry | |
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2016-0005 | X_refsource_confirm |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/41416 | 2016-12-24 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | Sonicwall Secure Remote Access Server Search vendor "Dell" for product "Sonicwall Secure Remote Access Server" | 8.1.0.2-14sv Search vendor "Dell" for product "Sonicwall Secure Remote Access Server" and version "8.1.0.2-14sv" | - |
Affected
|