CVE-2012-3951

high · 7.5

The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session.

7.5

CVSS

52.0%

EPSS (exploit prob.)

99th

EPSS percentile

2012-07-31

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
sonicwall	scrutinizer	<= 9.0.1.19899

Check a specific version with /api/v1/cve/match.

References

http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt
http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-3951