QwikSec

Security Database

CVE

CWE

Training

CVE-2018-9866

Published: Aug 3, 2018

Modified: May 5, 2025

PUBLISHED

Description

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.

Vendor	Product	Versions
SonicWall	Global Management System (GMS)	affected `8.1 and earlier`

Weaknesses (CWE)

References

https://twitter.com/ddouhine/status/1019251292202586112

x_refsource_MISC

https://github.com/rapid7/metasploit-framework/pull/10305

x_refsource_MISC

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0007

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.