CVE-2012-2962

CVE-2012-2962 describes a SQL injection vulnerability in Plixer Scrutinizer (also known as Dell SonicWALL Scrutinizer) versions prior to 9.5.2, specifically within the d4d/statusFilter.php component. This flaw allows remote authenticated attackers to execute arbitrary SQL commands by manipulating the 'q' parameter. The vulnerability carries a CVSS score of 6.5, indicating a medium severity. It requires authentication (Au:S) but can be exploited over the network (AV:N) with low attack complexity (AC:L), potentially leading to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). While not listed on the CISA KEV catalog, exploit intelligence shows a Metasploit module and ExploitDB entries exist, confirming public exploit code availability. Despite this, community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant public attention.