CVE-2014-8420 in the critical feed json
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and Sonic…
published 2014-11-25 11 y ago modified 2026-06-17 4 mo ago also EUVD-2014-8257
- cvss
- 9.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 24.0%
- EPSS 24.0% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Metasploit
Summary
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Timeline
- Published
- First public exploit (Metasploit exploit/unix/sonicwall/sonicwall_xmlrpc_rce)
Exploit prediction
23.99% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/unix/sonicwall/sonicwall_xmlrpc_rce SonicWall Global Management System XMLRPC set_time_zone Unauth RCE metasploit exploit, excellent rank, 2016-07-22
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
support.software.dell.com
/product-notification/136814
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/98911
vdb-entry
-
zerodayinitiative.com
/advisories/ZDI-14-385/
third-party-advisory, vdb-entry
-
securityfocus.com
/bid/71241
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2014-8420
- NVD CVE-2014-8420
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.