NetSight
high7.5Known exploited

CVE-2019-7483

SonicWall SMA100 Directory Traversal Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-28. Federal due date: 2022-04-18.

Apply updates per vendor instructions.

Impact

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

Affected products

VendorProductAffected versions
SonicwallSma 100 Firmware
before 9.0.0.4

Weakness classification

References