CVE-2019-7479 Information

Description

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier Gen 6 version 6.2.7.4-32n 6.5.1.4-4n 6.5.2.3-4n 6.5.3.3-3n 6.2.7.10-3n 6.4.1.0-3n 6.5.3.3-3n 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE) 6.5.0.2.8v_RC367 (AZURE) SonicOSv 6.5.0.2.8v_RC368 (AWS) SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Reference

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction Required

HIGH

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

7.2