{"id":"CVE-2013-1360","aliases":["EUVD-2013-1399","GHSA-2g63-6gwh-xmr7"],"status":"published","title":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4...","description":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.23211,"percentile":0.9778,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287"],"published":"2020-02-11T15:44:43Z","modified":"2026-06-16T23:51:16Z","exploits":[{"source":"exploitdb","id":"EDB-24203","title":"SonicWALL GMS/Viewpoint/Analyzer - Authentication Bypass","type":"webapps","platform":"multiple","date":"2013-01-18","url":"https://www.exploit-db.com/exploits/24203"}],"products":[{"vendor":"sonicwall","product":"analyzer"},{"vendor":"sonicwall","product":"global_management_system"},{"vendor":"sonicwall","product":"universal_management_appliance"},{"vendor":"sonicwall","product":"viewpoint"}],"references":[{"url":"http://www.securitytracker.com/id/1028007","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/57446","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81366","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/24203","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-01/0075.html","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://packetstormsecurity.com/files/cve/CVE-2013-1360","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1360"},{"url":"https://github.com/advisories/GHSA-2g63-6gwh-xmr7"}],"sources":{"cve":[{"id":"CVE-2013-1360","description":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.","status":"published","published":"2020-02-11T15:44:43Z","modified":"2024-08-06T14:57:05.126Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1399","description":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.","status":"published","published":"2020-02-11T15:44:43Z","modified":"2024-08-06T14:57:05Z","updated_at":"2026-11-03T01:56:42.411756Z"}],"ghsa":[{"id":"GHSA-2g63-6gwh-xmr7","title":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4...","description":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.","status":"published","published":"2022-05-05T00:29:34Z","modified":"2023-02-01T05:01:53Z","updated_at":"2026-11-02T14:49:48.187575Z"}],"nvd":[{"id":"CVE-2013-1360","description":"An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.","status":"published","published":"2020-02-11T16:15:12.227Z","modified":"2026-06-16T23:51:16.72Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:52.934105Z"}]}}