PT-2019-18627 · Sonicwall · Sonicwall Sma100

Published 2019-12-19 · Updated 2019-12-31 · CVE-2019-7486

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.4 and earlier

Description The issue allows an authenticated user to execute arbitrary code in the viewcacert CGI script due to code injection.

Recommendations For SonicWall SMA100 versions 9.0.0.4 and earlier, update to a version later than 9.0.0.4 to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-7486

Affected Products

Sonicwall Sma100

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-7486 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7486 · Vendor Advisory
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021 · Vendor Advisory