S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Jan 8, 2024

CVE-2019-7481 Scanner

Detects 'Information Disclosure' vulnerability in SonicWall SMA100 affects v. 9.0.0.3 and earlier..

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
3.5k
Times Used
continuous scan runs
4.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2019-7481
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
SMA100by SonicWall
9.0.0.3 and earlier
Updated Aug 21, 2026View on NVD →
Detail

The SonicWall SMA100 is a remote access management solution that enables secure access to resources for authorized users. This product is mainly used by businesses to provide secure remote access to their employees, partners, and customers. The SMA100 has a range of features, including enhanced security policies, granular access control, and support for multi-factor authentication. With the SMA100, users can access their corporate resources from anywhere at any time, ensuring productivity and flexibility for their workforce.

Unfortunately, the SMA100 has recently been found to contain a severe vulnerability known as CVE-2019-7481. This vulnerability affects SMA100 versions 9.0.0.3 and earlier and can be exploited by an unauthenticated user to gain read-only access to unauthorized resources. This means that an attacker can access sensitive information, such as confidential data and intellectual property, without any authentication credentials. This vulnerability allows attackers to steal sensitive information, compromise systems, and conduct espionage activities without detection.

The consequences of this vulnerability can be devastating for organizations that rely on the SMA100 for secure remote access. The theft of critical data can lead to financial losses, reputational damage, and regulatory penalties. Moreover, attackers may use the stolen information for further attacks, such as ransomware, which can cause further harm to the organization.

In conclusion, the SonicWall SMA100 vulnerability can have significant consequences for any organization that relies on it for remote access. Organizations need to take proactive measures to mitigate the risk of this vulnerability, such as upgrading to the latest version, adjusting their security policies to prevent unauthorized access, and using multi-factor authentication. By taking these precautions, organizations can better protect themselves against cyber threats and keep their data and assets safe. If you want to learn more about vulnerabilities in your digital assets, check out our pro features on s4e.io. Our platform can help you quickly and easily identify vulnerabilities and take action to protect your business.

 

REFERENCES

Solution Advice

To protect against the CVE-2019-7481 vulnerability, SonicWall users are advised to take the following precautions:

  • Upgrade the SMA100 to the latest version immediately.
  • Review and adjust the security policies in the SMA100 to ensure that only authorized users have access to sensitive information.
  • Use multi-factor authentication to prevent unauthorized access to the SMA100.
  • Monitor the SMA100 logs and alerts for any suspicious activity, such as attempts to exploit the CVE-2019-7481 vulnerability.
  • Train employees on the importance of security and how to identify and report potential threats.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2019-7481 scanner - Information Disclosure vulnerability in SonicWall SMA100 | S4E