PT-2019-18627 · Sonicwall · Sonicwall Sma100

Publicado 2019-12-19 · Atualizado 2019-12-31 · CVE-2019-7486

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.4 and earlier

Description The issue allows an authenticated user to execute arbitrary code in the viewcacert CGI script due to code injection.

Recommendations For SonicWall SMA100 versions 9.0.0.4 and earlier, update to a version later than 9.0.0.4 to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2019-7486

Produtos afetados

Sonicwall Sma100

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-7486 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-7486 · Aviso do Fabricante
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021 · Aviso do Fabricante