Findings

CVE-2019-7483

SonicWall SMA100 Directory Traversal Vulnerability

Published Dec 18, 2019 · updated Jun 16, 2026 · sonicwall sma 100 firmware

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 18, 2019 · Catalog

    Detected

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

  2. Mar 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 18, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

Required action

Apply updates per vendor instructions.

CISA due date Apr 18, 2022

Affected

  • cpe sonicwall/sma 100 firmwareversion unspecified
  • vendor SonicWall SMA100version unspecified

Sources

  • CISA KEVCVE-2019-7483

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

    cisa.gov
  • CVE.orgCVE-2019-7483

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-7483

    30-day exploitation probability 4.0%

    first.org
  • NIST NVDCVE-2019-7483

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

    nvd.nist.gov

References

CVE-2019-7483 · ZeroDay Findings