CVE-2012-2627

CVE-2012-2627 describes an arbitrary file upload vulnerability in Plixer Scrutinizer (also known as Dell SonicWALL Scrutinizer) versions prior to 9.5.0. Specifically, the d4d/uploader.php component in the web console allows unauthenticated remote attackers to create or overwrite arbitrary files within the %PROGRAMFILES%\Scrutinizer\snmp\mibs\ directory via a crafted multipart/form-data POST request. This vulnerability carries a critical CVSS score of 9.4, indicating a severe risk. Its attack vector is network-based with low attack complexity and no authentication required, allowing for complete compromise of integrity and availability (C:N/I:C/A:C). While not listed on the CISA KEV catalog and showing no active community discussion or media coverage, an exploit for this vulnerability is publicly available on ExploitDB (EDB-37548), indicating that exploit code exists and could be leveraged by malicious actors.