Actively exploited in the wild
SonicWall SMA100 SQL Injection Vulnerability
SonicWall - SMA100 · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-7481
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A vulnerability in SonicWall SMA100 allows an unauthenticated user to gain read-only access to unauthorized resources. This affects SMA100 version 9.0.0.3 and earlier.
Risk Assessment
Unauthorized access to resources could expose sensitive information such as configurations or user data, potentially facilitating further attacks.
Recommendation
Update SMA100 to a version later than 9.0.0.3 that includes a fix for this vulnerability.
Original NVD description (English source)
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.