Skip to content
COOEY

EXPOSURES › CVE-2019-7481

CVE-2019-7481

CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-7481 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 ransomwarerceexploited-in-wildunpatched

SonicWall SMA100 exposed to SQL injection, unauth'd users gained read-only access

SonicWall SMA100 suffered a critical SQL injection, allowing unauth'd users to access unauthorized data.

Shame score — Critical RCE flaw actively exploited by CISA.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
SonicWall · vendorSMA100 · product
DESCRIPTION

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
SonicWall faced severe fallout for an unauthenticated SQL injection flaw in SMA100, exposing unauthorized read-only access.
cooey ↗ severe-fallout -0.60
SonicWall faced severe fallout for an unauthenticated SQL injection flaw in SMA100, exposing unauthorized read-only access.
"SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources."
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.