{"id":1065,"date":"2016-07-21T15:57:47","date_gmt":"2016-07-21T13:57:47","guid":{"rendered":"http:\/\/borncity.com\/win\/?p=1065"},"modified":"2020-01-17T17:27:29","modified_gmt":"2020-01-17T16:27:29","slug":"vulnerabilities-and-backdoors-in-dells-sonicwall","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2016\/07\/21\/vulnerabilities-and-backdoors-in-dells-sonicwall\/","title":{"rendered":"Vulnerabilities and Backdoors in Dell’s SonicWALL"},"content":{"rendered":"

Some bad news for users of Dell's SonicWALL security solution. Security researchers has identified six Vulnerabilities including a hidden 'Backdoor' in Dell's SonicWALL Global Management System (GMS), Version 8.1 (Build: 8110.1197). <\/p>\n

<\/p>\n

\"\"<\/p>\n

Dell SonicWALL security<\/h3>\n

Dell offers SonicWALL security<\/a> as \"Integrate hardware, software and services for best-of-breed security\". The solutions offered should secure organization's systems, users and data with a deep level of protection that won't compromise network performance. SonicWALL comes as wired and wireless security solutions. Security reserachers from digitaldefense.com<\/a> has discovered six critical vulnerabilities in Dell SonicWALL Global Management System (GMS), Version 8.1 (Build: 8110.1197). <\/p>\n


(SonicWALL Global Management System, Quelle: Dell)<\/p>\n

SonicWALL GMS (Global Management System) is a central management, report and monitoring tool for all SonicWALL solutionen like Firewall, Email Security and Secure Remote Access. <\/p>\n

Some vulnerabilities allows unauthorized root command injection via set_time_config <\/em>and other methods. There are also hidden default account(s) with easily guessable passwords. Such a hidden account can be used, according to digitaldefense.com<\/a>, to add non administrative users via the CLI Client that can be downloaded from the Console interface of the GMS web application. The non-administrative user can then log into the web interfaces and change the password for the admin user, elevating their privilege to that of the admin user upon logging out and back in as the admin user with the new password. This would grant the attacker full control of the GMS interface and all attached SonicWALL appliances. According to ZDNet.com<\/a> Dell has confirmed the vulnerabilities in GMS version 8.0\/8.1. <\/p>\n

\n

@etguenni<\/a> Dell SonicWALL GMS hotfix is available; update
w\/ this version: https:\/\/t.co\/YztjfKEkTH<\/a>. See more: https:\/\/t.co\/bWDDrJXoBd<\/a>.<\/p>\n

\u2014 SonicWALL Cares (@SonicWALLCares) 21. Juli 2016<\/a><\/p><\/blockquote>\n