CVE-2019-7481

Timeline

Detection, updates, and resolution for this record.

1. Dec 17, 2019 · Catalog

   Detected

   Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Aug 11, 2026 · Catalog

   Updated

   Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

Affected

• cpe sonicwall/sma 100 firmwareversion unspecified
• vendor SonicWall SMA100version unspecified

Sources

• CISA KEVCVE-2019-7481

  SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.

  cisa.gov
• CVE.orgCVE-2019-7481

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2019-7481

  30-day exploitation probability 99.9%

  first.org
• NIST NVDCVE-2019-7481

  Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Vendor Advisory · psirt.global.sonicwall.com
• US Government Resource · cisa.gov