CVE-2019-7475CWE-284

A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing…

published April 2, 2019

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

⚠️ Unprivileged users can tap into advanced routing services like a waiter sneaking a peek at the chef's secret recipes! This vulnerability in SonicWall SonicOS could potentially lead to unauthorized access. 🔥 Imagine a restaurant where a diner is able to access the kitchen just because the door was left ajar. In this case, unprivileged users can access advanced routing services without proper authorization, much like that diner. It’s surprisingly sneaky and could lead to unwanted changes in your network configurations! This vulnerability allows unauthorized users to manipulate advanced routing services. An attacker could change routing settings, potentially causing disruptions in network traffic, leading to downtime or data exposure. It's not the catastrophic breach we dread, but any unauthorized access can lead to serious headaches for network administrators!

Put simply

Imagine a restaurant where a diner is able to access the kitchen just because the door was left ajar. In this case, unprivileged users can access advanced routing services without proper authorization, much like that diner. It’s surprisingly sneaky and could lead to unwanted changes in your network configurations! The flaw exists in SonicWall's SonicOS and SonicOSv when management is enabled under specific configurations, allowing unprivileged users access to advanced routing features. Affected versions include various SonicOS Gen 5 and Gen 6 builds, as well as several SonicOSv versions for different virtual environments.

What to do

This vulnerability allows unauthorized users to manipulate advanced routing services. An attacker could change routing settings, potentially causing disruptions in network traffic, leading to downtime or data exposure. It's not the catastrophic breach we dread, but any unauthorized access can lead to serious headaches for network administrators! To remediate this issue, review your SonicWall configuration settings to ensure management access is properly restricted. Update to the latest SonicOS versions where this vulnerability is patched. Regularly audit your user permissions to ensure only authorized personnel have access to sensitive settings. 🔒 You've got this! Follow these steps to secure your network and keep those unauthorized diners out of the kitchen! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01392 · 72.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-04-02T17:20Z
EPSS history
Timeline
  • 02 APR 17:20Z
    A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing…
    cvelistv5