CVE-2012-2626

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows…

published July 31, 2012

CVSS
—
EPSS
44%
Percentile
98.8
In the wild
Unconfirmed
What it is

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.44458 · 98.8th percentile
Published
2012-07-31T10:00Z
EPSS history
Timeline
  • 31 JUL 10:00Z
    cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows…
    cvelistv5