IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch KEV In Ransomware genutzt

CVE-2019-7481SonicWall SMA100 SQL Injection Vulnerability

SonicWall SMA100 Veröffentlicht: (vor 6 Jahren)

Bekannt ausgenutzt — SonicWall SMA100 SQL Injection Vulnerability

CISA hat am 03.11.2021 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 03.05.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-7481

Beschreibung

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

Schwachstellentyp (CWE): CWE-89

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
sonicwall sma 100 firmware < 9.0.0.4
SonicWall SMA100 9.0.0.3 and earlier

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:* < 9.0.0.4

Neue CVEs im selben Produkt — SonicWall

5.1Mittel
CVE-2026-19703
SonicWall SonicOS

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limite…

5.9Mittel
CVE-2026-77709
SonicWall SonicOS

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

5.9Mittel
CVE-2026-77708
SonicWall SonicOS

A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

7.5Hoch
CVE-2026-82308
SonicWall SonicOS

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

8.8Hoch
CVE-2026-107154
SonicWall SonicOS

A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.