Vulnerability record · CVE-2012-2627 · published 31 July 2012

CVE-2012-2627: Sonicwall scrutinizer vulnerability

Sonicwall · Scrutinizer

d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.

9.4 CVSS 2.0 High EPSS 5.7% · top 7.2%

9.4CVSS 2.0 base score

5.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Scrutinizer Sonicwall

References

Link	Tags
http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html	Broken Link
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt	Third Party Advisory
http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html	Broken Link
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt	Third Party Advisory

Track CVE-2012-2627 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2012-3951Plixer Scrutinizer default admin password enables SQL injectionPlixer Scrutinizer (also branded Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier ships with a default password of 'admin' for the scrutinizer and…EPSS 52%analysed31 Jul 2012 6.5CVE-2014-4977Dell SonicWall Scrutinizer SQL injection in admin and exporter endpointsDell SonicWall Scrutinizer 11.0.1 contains multiple SQL injection flaws in cgi-bin/admin.cgi and d4d/exporters.php, reachable through parameters such…EPSS 75%analysed16 Jul 2014 6.5CVE-2012-2962Plixer Scrutinizer statusFilter.php SQL injectionPlixer Scrutinizer (also branded Dell SonicWALL Scrutinizer) before 9.5.2 contains a SQL injection flaw in d4d/statusFilter.php. The q parameter is p…EPSS 67%analysed30 Jul 2012 5.5CVE-2014-4976Sonicwall scrutinizer permissions and access controls vulnerabilityDell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change p…EPSS 2.7%16 Jul 2014 5.0CVE-2012-2626Sonicwall scrutinizer improper authentication vulnerabilitycgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which…EPSS 44%31 Jul 2012 4.3CVE-2012-3848Sonicwall scrutinizer cross-site scripting vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remo…EPSS 2.5%31 Jul 2012

Source: NIST National Vulnerability Database (record CVE-2012-2627), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.