{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-01-15T00:00:00", "descriptions": [{"lang": "en", "value": "The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-04-19T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-163"}, {"name": "1035015", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1035015"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.software.dell.com/product-notification/185943"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-2397", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.zerodayinitiative.com/advisories/ZDI-16-163", "refsource": "MISC", "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-163"}, {"name": "1035015", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1035015"}, {"name": "https://support.software.dell.com/product-notification/185943", "refsource": "CONFIRM", "url": "https://support.software.dell.com/product-notification/185943"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T23:24:49.292Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-163"}, {"name": "1035015", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1035015"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.software.dell.com/product-notification/185943"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-2397", "datePublished": "2016-02-17T15:00:00", "dateReserved": "2016-02-17T00:00:00", "dateUpdated": "2024-08-05T23:24:49.292Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sonicwall:uma_em5000_firmware:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "94D32881-3205-40C9-9099-D517DDD0E85F", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:uma_em5000_firmware:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "4AC08F8A-B838-4878-A599-8FBD69EAF28E", "vulnerable": true}, {"criteria": "cpe:2.3:o:sonicwall:uma_em5000_firmware:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "34AECE24-76B8-4EEB-9018-F3C35FEE6A00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sonicwall:uma_em5000:-:*:*:*:*:*:*:*", "matchCriteriaId": "23315AEF-29C1-4A58-A933-2A4305123D7F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sonicwall:analyzer:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "05DC3043-D6B1-4863-AE06-FAC32F94091B", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:analyzer:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "59AE4366-0EF5-4DD9-B533-1101AB06FC0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:analyzer:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "B30D6D7E-63DA-49F9-A904-FAC2C40B4B72", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "C91AE401-839F-4B95-AC84-12D003B0CF59", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "E119AFF9-BAB9-42BA-AF89-A0C59DC4D4F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:sonicwall:global_management_system:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "36989FC7-3390-455E-8F7E-E3C4EB29D812", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data."}, {"lang": "es", "value": "La implementaci\u00f3n de cliserver en Dell SonicWALL GMS, Analyzer y UMA EM5000 7.2, 8.0 y 8.1 en versiones anteriores a Hotfix 168056 permite a atacantes remotos deserializar y ejecutar c\u00f3digo Java arbitrario a trav\u00e9s de datos XML manipulados."}], "id": "CVE-2016-2397", "lastModified": "2018-03-12T17:31:18.707", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-02-17T15:59:07.690", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1035015"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-16-163"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://support.software.dell.com/product-notification/185943"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}