{"id":"CVE-2014-8420","aliases":["EUVD-2014-8257","GHSA-x3g5-w3fq-h658"],"status":"published","title":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2,...","description":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.","severity":{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.23987,"percentile":0.97852,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2014-11-25T15:00:00Z","modified":"2026-06-17T00:16:42Z","exploits":[{"source":"metasploit","id":"exploit/unix/sonicwall/sonicwall_xmlrpc_rce","title":"SonicWall Global Management System XMLRPC set_time_zone Unauth RCE","type":"exploit","platform":"Unix","date":"2016-07-22","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/sonicwall/sonicwall_xmlrpc_rce"}],"products":[{"vendor":"sonicwall","product":"analyzer"},{"vendor":"sonicwall","product":"global_management_system"},{"vendor":"sonicwall","product":"uma_em5000"}],"references":[{"url":"https://support.software.dell.com/product-notification/136814","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98911","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-14-385/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/71241","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8420"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-14-385"},{"url":"https://github.com/advisories/GHSA-x3g5-w3fq-h658"}],"sources":{"cve":[{"id":"CVE-2014-8420","description":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-25T15:00:00Z","modified":"2024-08-06T13:18:47.985Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8257","description":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-25T15:00:00Z","modified":"2024-08-06T13:18:47Z","updated_at":"2026-11-03T01:56:52.443165Z"}],"ghsa":[{"id":"GHSA-x3g5-w3fq-h658","title":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2,...","description":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.","status":"published","published":"2022-05-14T03:38:51Z","modified":"2025-04-12T12:42:18Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:19.407948Z"}],"nvd":[{"id":"CVE-2014-8420","description":"The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.","status":"published","published":"2014-11-25T15:59:04.637Z","modified":"2026-06-17T00:16:42.223Z","cvss":[{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:57.304171Z"}]}}