Vulnerability Details : CVE-2012-2627
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.
Products affected by CVE-2012-2627
- cpe:2.3:a:sonicwall:scrutinizer:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2627
0.87%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2627
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.4
|
HIGH | AV:N/AC:L/Au:N/C:N/I:C/A:C |
10.0
|
9.2
|
NIST |
References for CVE-2012-2627
-
http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
Press Release Archive – PlixerBroken Link
-
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt
404 Not Found | TrustwaveThird Party Advisory
Jump to