SonicWall.GMS.XMLRPC.set_time_zone.Remote.Code.Execution

Description

This indicates an attack attempt to exploit a Remote Code Execution Vulnerability in SonicWall Global Management System Virtual Appliance.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted XML file. An attacker can exploit this to overwrite and execute arbitrary code on the affected machine via a crafted XML file.

Affected Products

SonicWall Global Management System Virtual Appliance versions 8.1 (Build 8110.1197)

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.digitaldefense.com/digital-defense/vrt-discoveries/

References