Summary
Ein Angreifer kann mehrere Schwachstellen in SonicWall GMS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code – einschließlich Code mit Root-Rechten – auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.
Product
Das SonicWall Global Management System (GMS) dient der zentralen Verwaltung von SonicWall Firewalls.
Vulnerabilities 6
-
Critical 9.4
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlie…
-
Critical 9.1
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versio…
-
High 8.4
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (…
-
High 8.3
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.…
-
Medium 6.3
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1…
-
Medium 6.1
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions…
Revision history
-
#1
Initiale Fassung
References
-
SonicWall Security Advisory vom 2026-08-11
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011