DELL SonicWALL 'node_id' Cross Site Scripting Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. DELL SonicWALL 'node_id' Cross Site Scripting Vulnerability
Summary
This host is running DELL SonicWALL and is prone to cross site scripting vulnerability.
Impact
Successful exploitation will allow remote attackers to steal the victim's cookie-based authentication credentials. Impact Level: Application
Solution
Upgrade to DELL SonicWALL version 7.2 or later. For updates refer to http://www.sonicwall.com/
Insight
The flaw is due to an input passed via the 'node_id' parameter to 'sgms/mainPage', which is not properly sanitised before using it.
Affected
DELL SonicWALL 7.0 and 7.1
Detection
Send a crafted exploit string via HTTP GET request and check whether it is able to read the string or not.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities