PT-2019-18619 · Sonicwall · Sonicwall Global Management System

Published 2019-04-26 · Updated 2021-11-03 · CVE-2019-7476

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall Global Management System (GMS) versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier

Description A vulnerability in SonicWall Global Management System (GMS) allows a remote user to gain access to the appliance using an existing SSH key.

Recommendations For GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier, consider restricting SSH key access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

CWE-1188

Related Identifiers

CVE-2019-7476

Affected Products

Sonicwall Global Management System

References · 3

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-7476 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7476 · Security Note