CyberSec.Space Logo
Back to CVE Browser

CVE-2013-1359

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1030%
EPSS Percentile22.49th
PublishedFeb 11, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.

Affected Platforms (CPE)

📦
Sonicwall

Analyzer

= 7.0
📦
Sonicwall

Global Management System

= 4.1
📦
Sonicwall

Global Management System

= 5.0
📦
Sonicwall

Global Management System

= 5.1
📦
Sonicwall

Global Management System

= 6.0
📦
Sonicwall

Global Management System

= 7.0
📦
Sonicwall

Universal Management Appliance

= 5.1
📦
Sonicwall

Universal Management Appliance

= 6.0
📦
Sonicwall

Universal Management Appliance

= 7.0
📦
Sonicwall

Viewpoint

= 4.1
📦
Sonicwall

Viewpoint

= 5.0
📦
Sonicwall

Viewpoint

= 6.0

References & Advisories

🔗 http://www.exploit-db.com/exploits/24204
🔗 http://www.exploit-db.com/exploits/24322
🔗 http://www.securityfocus.com/bid/57445
🔗 http://www.securitytracker.com/id/1028007
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/81367
🔗 https://fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulns
🔗 https://packetstormsecurity.com/files/author/7547/
🔗 https://seclists.org/fulldisclosure/2013/Jan/125

Related Vulnerabilities

CVE-2020-2949510.0

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote una...

CVE-2006-383810.0

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products includin...

CVE-2020-2949310.0

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthentic...

CVE-2007-205910.0

Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote at...