Skip to content
Sign in
Not rated

CVE-2019-7479 A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode

Description

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Affected products and versions

Product Affected versions Fixed in
SonicOS 6.5 6.5.1.4-4n → 6.5.3.3-3n No fix stated
SonicOS 6.4.1.0-3n No fix stated
SonicOS 6.2 6.2.7.4-32n → 6.2.7.10-3n No fix stated
SonicOS 5.9.1.12-4o No fix stated
SonicOSv Versions not published

Other CVEs of SonicOS

The 75 CVEs of SonicOS →
CVE-2026-19703 A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions… 5.1 Medium CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+… 5.9 Medium CVE-2026-77708 A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication… 5.9 Medium CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability 7.5 High
Track this CVE