CVEvulnerability
CVE-2019-7488
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-12-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255, CWE-521
Description
Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.
Affected configurations
• sonicwall email security appliance (<= 10.0.2)
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-521 Weak Password Requirements weakness
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0014 Vendor Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0014 Vendor Advisory