CVE-2014-8420

EPSS 24.0%

Corrige pronto. tiene exploit funcional público.

Vexday Risk Score

23Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 24.0%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

25 nov 2014Publicada en NVD

22 jul 2016Exploit Metasploit disponible

Velocidad de armamento

604 díashasta el módulo Metasploit

Recomendación: Planificar corrección próxima — ya existe PoC pública.

The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Productos afectados

n/a · n/a

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 https://support.software.dell.com/product-notification/136814 http://www.securityfocus.com/bid/71241 http://www.zerodayinitiative.com/advisories/ZDI-14-385/