high7.5Known exploited
CVE-2019-7481
SonicWall SMA100 SQL Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Impact
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 100 Firmware | before 9.0.0.4 |