VYPR
Critical severity9.8NVD Advisory· Published Feb 17, 2016· Updated May 6, 2026

CVE-2016-2397

CVE-2016-2397

Description

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

Affected products

9
  • cpe:2.3:a:sonicwall:analyzer:7.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sonicwall:analyzer:7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:sonicwall:analyzer:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sonicwall:analyzer:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sonicwall:global_management_system:7.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sonicwall:global_management_system:7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:sonicwall:global_management_system:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:sonicwall:global_management_system:8.1:*:*:*:*:*:*:*
  • cpe:2.3:o:sonicwall:uma_em5000_firmware:7.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:sonicwall:uma_em5000_firmware:7.2:*:*:*:*:*:*:*
    • cpe:2.3:o:sonicwall:uma_em5000_firmware:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:sonicwall:uma_em5000_firmware:8.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.