CVE-2019-7483

CVE-2019-7483 is a high-severity (CVSS 7.5) vulnerability in SonicWall SMA100. CISA added it to the Known Exploited Vulnerabilities catalog on March 28, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by April 18, 2022. CISA does not currently list it as used in ransomware campaigns. SonicWall has 20 vulnerabilities in the KEV catalog, 13 of them linked to ransomware.

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7483