PT-2019-18619 · Sonicwall · Sonicwall Global Management System

Publicado 2019-04-26 · Atualizado 2021-11-03 · CVE-2019-7476

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall Global Management System (GMS) versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier

Description A vulnerability in SonicWall Global Management System (GMS) allows a remote user to gain access to the appliance using an existing SSH key.

Recommendations For GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier, consider restricting SSH key access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

CWE-1188

Identificadores relacionados

CVE-2019-7476

Produtos afetados

Sonicwall Global Management System

Referências · 3

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-7476 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7476 · Nota de Segurança