CVE-2013-1359: sonicwall analyzer Improper Authentication

EPSS trend

Probability

89.40%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 89.40% on 19-09-2026

19-09-202619-10-2026

EPSS score

89.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

5 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
exploit-databaseremotemultipleVerified
SonicWALL Gms 6 - Arbitrary File Upload (Metasploit)
Maturity: weaponized

Show all 5 exploits

exploit-databasemultipleUnverified
SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution
Maturity: poc
MetasploitremoteVerified
SonicWALL GMS 6 Arbitrary File Upload
exploit/multi/http/sonicwall_gms_upload
Maturity: weaponized

References

8 links

www.securityfocus.com/bid/57445X Refsource MISCThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/24204X Refsource MISCExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/24322X Refsource MISCExploitThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1028007X Refsource MISCThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/81367X Refsource MISCThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/author/7547/X Refsource MISCExploitThird Party AdvisoryVDB Entry
fortiguard.com/encyclopedia/ips/35264/multiple-sonicwall-products-authentication-bypass-vulnsX Refsource MISCThird Party Advisory
seclists.org/fulldisclosure/2013/Jan/125X Refsource MISCExploitMailing ListThird Party Advisory

Related vulnerabilities

CVE-2018-9866sonicwallglobal_management_system+14.50%8y ago03-08-2018 20:00A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.CVE-2018-5691sonicwallanalyzer+10.71%8y ago14-01-2018 04:00SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.CVE-2018-3639alpinexen+55760.63%8y ago22-05-2018 12:00Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.CVE-2013-1360sonicwallanalyzer+323.21%6y ago11-02-2020 15:44An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.CVE-2013-7025sonicwallanalyzer+24.34%12y ago09-12-2013 11:00Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.CVE-2021-20020sonicwallglobal_management_system+13.73%5y ago10-04-2021 06:50A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root.

All vulnerabilities inanalyzer global_management_system universal_management_appliance viewpoint

CVE-2013-1359: sonicwall analyzer Improper Authentication

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References