Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:34 a.m.4 views

CVE-2019-7487

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...

7.8CVSS7AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-17029

Malware in sbrugna...

7.8CVSS7.1AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2019/12/19 1:15 a.m.11 views

CVE-2019-7487

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...

7.8CVSS7.8AI score0.00038EPSS
Exploits0References1
Prion
Prion
added 2019/12/19 1:15 a.m.11 views

Remote code execution

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...

4.6CVSS7.7AI score0.00038EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2019/12/19 12:35 a.m.91 views

CVE-2019-7487

CVE-2019-7487 affects SonicOS SSLVPN NACagent 3.5 for Windows. The issue stems from an unquoted autorun/service path, allowing a malicious binary within the parent directory to trigger code execution. Multiple sources reiterate that installation creates an unquoted path which can be exploited loc...

7.8CVSS7.7AI score0.00038EPSS
Exploits0References1Affected Software1
SonicWall
SonicWall
added 2019/12/18 10:11 p.m.4 views

SonicOS SSLVPN NACAgent 3.5 windows binary is vulnerable to Unquoted Service Path Privilege Escalation vulnerability

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution. CVE: CVE-2019-7487 Last updated: Dec. 18, 2019, 10:11 p.m...

7CVSS7.2AI score0.00038EPSS
Exploits0
Rows per page
Query Builder