CVE-2015-3990: The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 al...

Security readout for executives and security teams

CVE-2015-3990 is an authenticated command execution flaw in the GMS ViewPoint web application used by Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4. A user with valid access could potentially run system commands through configuration-related functionality. Exposure is most likely in organizations still running Dell Sonicwall GMS, Analyzer, or UMA EM5000 versions older than 7.2 SP4, especially where GMSVP is reachable by administrators or broad internal networks. Treat this as high priority if the products are present. Command execution in security management infrastructure can affect monitoring, appliance administration, and trust in security operations. The urgency is lower only where the affected software is absent, upgraded, or tightly isolated. Mitigation focus: Upgrade affected products to Dell Sonicwall 7.2 SP4 or later, per vendor guidance.; Restrict GMSVP access to trusted administrative networks and users.; Review and remove unnecessary GMSVP accounts and privileges..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.