CVE-2016-2397

high-risk

Published 2016-02-17

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

Do I need to act?

5.0% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (9)

Uma Em5000 Firmware

Analyzer

Global Management System

Uma Em5000 Firmware

Global Management System

Affected Vendors

Sonicwall

References (6)

Third Party Advisory http://www.securitytracker.com/id/1035015

Third Party Advisory http://www.zerodayinitiative.com/advisories/ZDI-16-163

Vendor Advisory https://support.software.dell.com/product-notification/185943

Third Party Advisory http://www.securitytracker.com/id/1035015

Third Party Advisory http://www.zerodayinitiative.com/advisories/ZDI-16-163

Vendor Advisory https://support.software.dell.com/product-notification/185943

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 8/34 · Low

Exposure 15/34 · Moderate