CVE-2013-1359: An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4

This week

CRITICAL 9.8REMOTEDOWNGRADEDOWNGRADEDOWNGRADE

CVE-2013-1359 is a critical-severity flaw (CVSS 9.8) affecting analyzer, global management system, universal management appliance. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.

Why this priority

Critical severity
EPSS top 1%: very likely to be exploited
Public exploit reference
Remotely exploitable, no login, no user action

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	9.8 (Critical)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	89.4% (top 1%)
CISA exploited list	No
Weakness	CWE-287
Published	2020-02-11
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: sonicwall

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2020-02-11 17:15 UTCPublished CVE record published
2026-06-16 23:51 UTCUpdated Record last modified

sonicwall analyzer DOWNGRADE

Affected: 7.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.0

1. Check installed version

apt-cache policy analyzer || rpm -q analyzer || analyzer --version

2. No fixed release: DOWNGRADE to a release before 7.0 (Debian / Ubuntu)

apt-cache madison analyzer sudo apt install analyzer=<VERSION_BEFORE_7.0> sudo apt-mark hold analyzer

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list analyzer sudo dnf downgrade analyzer-<VERSION_BEFORE_7.0> sudo dnf versionlock add analyzer

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

sonicwall global management system DOWNGRADE

Affected: 4.1 · 5.0 · 5.1 · 6.0 · 7.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 4.1

1. Check installed version

apt-cache policy global-management-system || rpm -q global-management-system || global-management-system --version

2. No fixed release: DOWNGRADE to a release before 4.1 (Debian / Ubuntu)

apt-cache madison global-management-system sudo apt install global-management-system=<VERSION_BEFORE_4.1> sudo apt-mark hold global-management-system

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list global-management-system sudo dnf downgrade global-management-system-<VERSION_BEFORE_4.1> sudo dnf versionlock add global-management-system

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

sonicwall universal management appliance DOWNGRADE

Affected: 5.1 · 6.0 · 7.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 5.1

1. Check installed version

apt-cache policy universal-management-appliance || rpm -q universal-management-appliance || universal-management-appliance --version

2. No fixed release: DOWNGRADE to a release before 5.1 (Debian / Ubuntu)

apt-cache madison universal-management-appliance sudo apt install universal-management-appliance=<VERSION_BEFORE_5.1> sudo apt-mark hold universal-management-appliance

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list universal-management-appliance sudo dnf downgrade universal-management-appliance-<VERSION_BEFORE_5.1> sudo dnf versionlock add universal-management-appliance

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

sonicwall viewpoint DOWNGRADE

Affected: 4.1 · 5.0 · 6.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 4.1

1. Check installed version

apt-cache policy viewpoint || rpm -q viewpoint || viewpoint --version

2. No fixed release: DOWNGRADE to a release before 4.1 (Debian / Ubuntu)

apt-cache madison viewpoint sudo apt install viewpoint=<VERSION_BEFORE_4.1> sudo apt-mark hold viewpoint

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list viewpoint sudo dnf downgrade viewpoint-<VERSION_BEFORE_4.1> sudo dnf versionlock add viewpoint

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Exploit-DB: SonicWALL Gms 6 - Arbitrary File Upload (Metasploit)
Exploit-DB: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution
Metasploit: SonicWALL GMS 6 Arbitrary File Upload

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2013-1359?

analyzer: downgrade or apply the listed mitigation; global management system: downgrade or apply the listed mitigation; universal management appliance: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2013-1359 being exploited?

CVE-2013-1359 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2013-1359 affect?

CVE-2013-1359 affects analyzer, global management system, universal management appliance. Severity is critical (CVSS 9.8). An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the sk

How urgent is CVE-2013-1359?

Priority 69/100. Critical severity; EPSS top 1%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action

Software pages

SonicWall vulnerabilities · Dell vulnerabilities

Related CVEs

CVE-2018-5691 MEDIUM 5.4 UPGRADE UPGRADE SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeCon
CVE-2013-1360 CRITICAL 9.8 DOWNGRADE DOWNGRADE An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1,

References

← Back to latest CVEs