Actively exploited in the wild
SonicWall SMA100 SQL Injection Vulnerability
SonicWall - SMA100 · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-7481
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A vulnerability in SonicWall SMA100 allows an unauthenticated user to gain read-only access to unauthorized resources. This affects SMA100 version 9.0.0.3 and earlier.
Risk Assessment
Unauthorized access to resources could expose sensitive information such as configurations or user data, potentially facilitating further attacks.
Recommendation
Update SMA100 to a version later than 9.0.0.3 that includes a fix for this vulnerability.
Other vulnerabilities in SonicWall SMA100
See all- CVE-2021-20016CriticalActively exploited
A SQL injection vulnerability in SonicWall SSLVPN SMA100 allows a remote unauthenticated attacker to perform SQL queries to access usernames, passwords, and other session-related information. This affects SMA100 build version 10.x.
- CVE-2019-7483HighActively exploited
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. The vulnerability does not allow reading file contents, only detecting their existence.
Original NVD description (English source)
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS