CVE-2019-7487CWE-428

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious…

published December 19, 2019

CVSS
—
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00462 · 39.1th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2019-12-19T00:35Z
EPSS history
Timeline
  • 19 DEC 00:35Z
    Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious…
    cvelistv5