What’s Vulnerable › Vulnerabilities

CVE-2019-7479

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-31 · updated 2026-06-17
• Weakness: CWE-285

Description

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Affected products

• SonicWall SonicOS: through 5.9.1.12-4o; 6.2.7.4-32n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.1.4-4n, 6.5.1.9-4n, 6.5.2.3-4n (+1)
• SonicWall SonicOSv: 6.5.0.2.8v, 6.5.0.2.8v-rc363, 6.5.0.2.8v-rc366, 6.5.0.2.8v-rc367, 6.5.0.2.8v-rc368

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012

Get alerted when CVE-2019-7479 or the next vulnerability affects your stack