漏洞描述
The SonicWall SRA 4600 VPN appliance is susceptible to a pre-authentication SQL injection vulnerability.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
www.crowdstrike.comhttps://www.crowdstrike.com/blog/how-ecrime-groups-leverage-sonicwall-vulnerability-cve-2019-7481/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2019-7481↗psirt.global.sonicwall.comhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0016↗github.comhttps://github.com/Ostorlab/KEV↗