CVEvulnerability

CVE-2019-7479

7.2 HIGH Published 2019-12-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-269, CWE-285

Description

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Affected configurations

• sonicwall sonicos (<= 5.9.1.12-4o) • sonicwall sonicos 6.2.7.4-32n • sonicwall sonicos 6.2.7.10-3n • sonicwall sonicos 6.4.1.0-3n • sonicwall sonicos 6.5.1.4-4n • sonicwall sonicos 6.5.1.9-4n • sonicwall sonicos 6.5.2.3-4n • sonicwall sonicos 6.5.3.3-3n • sonicwall sonicosv 6.5.0.2.8v

Related

Weakness · CWE (2)

  • CWE-269 Improper Privilege Management weakness
  • CWE-285 Improper Authorization weakness

References