{"uuid": "d058003e-7c37-48e7-962d-a7b35b9c439d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-8420", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/sonicwall/sonicwall_xmlrpc_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Flanders\", \"kernelsmith\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in SonicWall Global\\n          Management System Virtual Appliance versions 8.1 (Build 8110.1197)\\n          and below. This virtual appliance can be downloaded from\\n          http://www.sonicwall.com/products/sonicwall-gms/ and is used 'in a\\n          holistic way to manage your entire network security environment.'\\n\\n          These vulnerable versions (8.1 Build 8110.1197 and below) do not\\n          prevent unauthenticated, external entities from making XML-RPC\\n          requests to port 21009 of the virtual app. After the XML-RPC call\\n          is made, a shell script is called like so:\\n          'timeSetup.sh --tz=\\\"`command injection here`\\\"' --usentp=\\\"blah\\\"'.\", \"disclosure_date\": \"2016-07-22\", \"fullname\": \"exploit/unix/sonicwall/sonicwall_xmlrpc_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"SonicWall Global Management System XMLRPC set_time_zone Unauth RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/sonicwall/sonicwall_xmlrpc_rce.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/sonicwall/sonicwall_xmlrpc_rce\", \"references\": [\"CVE-2014-8420\", \"URL-https://www.digitaldefense.com/digital-defense/vrt-discoveries/\", \"URL-https://slides.com/kernelsmith/bsidesaustin2018/#/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"SonicWall Global Management System Virtual Appliance\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:39.627437Z"}