CVE-2014-4977: SonicWall Scrutinizer

Medium severity, CVSS 6.5. EPSS: 74.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit function, (3) methodDetail parameter in the methodDetail function, or (4) xcNetworkDetail parameter in the xcNetworkDetail function in d4d/exporters.php.

Affected products

• SonicWall Scrutinizer: version 11.0.1 only

Published 2014-07-16. Last modified 2026-06-17.