CVE-2019-7479
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).
Una vulnerabilidad en SonicOS permite que un administrador de solo lectura autenticado pueda elevar los permisos en modo de configuración. Esta vulnerabilidad afectó a SonicOS Gen 5 versión 5.9.1.12-4o y anteriores, Gen 6 versión 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4. 1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n y SonicOSv versión 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv versión 6.5.0.2. 8v_RC366 (HYPER_V).
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-02-06 CVE Reserved
- 2019-12-31 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-269: Improper Privilege Management
- CWE-285: Improper Authorization
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012 | 2020-10-09 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | <= 5.9.1.12-4o Search vendor "Sonicwall" for product "Sonicos" and version " <= 5.9.1.12-4o" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.2.7.4-32n Search vendor "Sonicwall" for product "Sonicos" and version "6.2.7.4-32n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.2.7.10-3n Search vendor "Sonicwall" for product "Sonicos" and version "6.2.7.10-3n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.4.1.0-3n Search vendor "Sonicwall" for product "Sonicos" and version "6.4.1.0-3n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.5.1.4-4n Search vendor "Sonicwall" for product "Sonicos" and version "6.5.1.4-4n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.5.1.9-4n Search vendor "Sonicwall" for product "Sonicos" and version "6.5.1.9-4n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.5.2.3-4n Search vendor "Sonicwall" for product "Sonicos" and version "6.5.2.3-4n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicos Search vendor "Sonicwall" for product "Sonicos" | 6.5.3.3-3n Search vendor "Sonicwall" for product "Sonicos" and version "6.5.3.3-3n" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicosv Search vendor "Sonicwall" for product "Sonicosv" | 6.5.0.2.8v Search vendor "Sonicwall" for product "Sonicosv" and version "6.5.0.2.8v" | - |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicosv Search vendor "Sonicwall" for product "Sonicosv" | 6.5.0.2.8v Search vendor "Sonicwall" for product "Sonicosv" and version "6.5.0.2.8v" | rc363 |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicosv Search vendor "Sonicwall" for product "Sonicosv" | 6.5.0.2.8v Search vendor "Sonicwall" for product "Sonicosv" and version "6.5.0.2.8v" | rc366 |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicosv Search vendor "Sonicwall" for product "Sonicosv" | 6.5.0.2.8v Search vendor "Sonicwall" for product "Sonicosv" and version "6.5.0.2.8v" | rc367 |
Affected
| ||||||
Sonicwall Search vendor "Sonicwall" | Sonicosv Search vendor "Sonicwall" for product "Sonicosv" | 6.5.0.2.8v Search vendor "Sonicwall" for product "Sonicosv" and version "6.5.0.2.8v" | rc368 |
Affected
|