CVE-2012-2962: Plixer Scrutinizer statusFilter.php SQL injection

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: high.

high priorityPublic exploit code and a very high EPSS score make this SQL injection readily exploitable by any authenticated user, though it is not in KEV and requires valid credentials.

What it is

Plixer Scrutinizer (also branded Dell SonicWALL Scrutinizer) before 9.5.2 contains a SQL injection flaw in d4d/statusFilter.php. The q parameter is passed into SQL without proper sanitization, letting an authenticated remote user run arbitrary SQL against the application's database. Because Scrutinizer is a network monitoring and reporting platform, compromise of its database can expose collected traffic and device data.

Impact

An attacker with a valid account can execute arbitrary SQL commands, reading or altering database contents and potentially pivoting to other data the application can reach. The CVSS 2.0 vector rates partial confidentiality, integrity and availability impact.

Attack surface

Reachable over the network through the d4d/statusFilter.php endpoint via the q parameter. Authentication is required (Au:S in the CVSS vector); no user interaction is indicated.

Exploitation

Public exploit code exists (Exploit-DB 20033 and SecurityFocus BID 54625 are tagged Exploit), and EPSS gives a 30-day probability of 0.66828 (99.257th percentile). The CVE is not listed in CISA KEV, so no confirmed in-the-wild exploitation is recorded here.

What to do

• Upgrade Plixer/Dell SonicWALL Scrutinizer to version 9.5.2 or later, which the vendor states fixes this issue.
• If immediate upgrade is not possible, restrict network access to the Scrutinizer web interface to trusted management networks.
• Review and reduce the number of accounts with access to the affected interface, and enforce least privilege.
• Apply input validation or a WAF rule blocking SQL metacharacters in the q parameter as a temporary compensating control.

Detection

• Inspect web server and application logs for requests to d4d/statusFilter.php with suspicious q parameter values containing SQL syntax.
• Monitor database logs for anomalous queries or errors originating from the Scrutinizer application account.
• Alert on unusual data access or export patterns from Scrutinizer following authenticated sessions.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.