CVE-2019-7483

Katalog CVE

CVSS 7.5 · High KEV · sudah dieksploitasi EPSS 4,0%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada sonicwall sma 100 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD. Masuk katalog KEV CISA pada 28 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

Rincian

Terbit di NVD

19 Desember 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

4,0% peluang dieksploitasi; lebih tinggi dari 90,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

SonicWall SMA100 Directory Traversal Vulnerability

Masuk KEV

28 Maret 2022

Tenggat CISA

18 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018 advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7483 pemerintah AS