Skip to content
Sign in
Not rated

CVE-2018-9867 In SonicWall SonicOS, administrators without full permissions can download imported certificates

Description

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Affected products and versions

Product Affected versions Fixed in
SonicOS 6.5 6.5.1.3 → 6.5.3.1 No fix stated
SonicOS 6.4.0.0 No fix stated
SonicOS 6.2 6.2.7.3 → 6.2.7.8 No fix stated
SonicOS 6.0.5.3-86o No fix stated
SonicOSv Versions not published

Other CVEs of SonicOS

The 75 CVEs of SonicOS →
CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions… 5.1 Medium CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+… 5.9 Medium CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication… 5.9 Medium CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability 7.5 High
Track this CVE