Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-9866 EUVD-2018-21458GHSA-29h3-7qgp-vff3

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual…

Published Aug 3, 2018 · Updated May 5, 2025 · Assigned by sonicwall

Description

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.

Affected products

VendorProductAffectedFixed
SonicWall Global Management System (GMS) 8.1 and earlier —

References