CVE-2019-7483

SonicWall SMA100 unauthenticated directory traversal flaw lets attackers probe for files on the server.

An unauthenticated directory traversal vulnerability in the handleWAFRedirect CGI of the SonicWall SMA100 allows attackers to test for the presence of files on the server. This exposes sensitive data and violates CMMC/NIST 800-171 requirements for protecting information systems. DIB organizations should ensure all SonicWall SMA100 devices are patched or replaced to prevent data exfiltration and compliance failures.

Shame score — An unauthenticated directory traversal flaw in a widely deployed firewall product that was actively exploited in the wild, indicating a lack of timely patching and basic access controls.