Lucene search

[email protected]CVE-2019-7488

HistoryDec 23, 2019 - 10:15 p.m.

CVE-2019-7488

2019-12-2322:15:11

CWE-255

CWE-521

[email protected]

web.nvd.nist.gov

109

cve-2019-7488

sonicwall

email security

appliance

vulnerability

default password

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.

Affected configurations

NVD

Node

sonicwallemail_security_applianceRange≤10.0.2

CPENameOperatorVersion
sonicwall:email_security_appliancesonicwall email security appliancele10.0.2

CPE	Name	Operator	Version
sonicwall:email_security_appliance	sonicwall email security appliance	le	10.0.2

CNA Affected

[
  {
    "product": "Email Security Appliance",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.2 and earlier"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0014

Social References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Related for CVE-2019-7488

nvd1 cvelist1 prion1