CVE-2019-7486CWE-94

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script

published December 19, 2019

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01582 · 75.3th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2019-12-19T00:35Z
EPSS history
Timeline
  • 19 DEC 00:35Z
    Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script
    cvelistv5