CVE-2019-7483VulnerabilityPublished 03/28/2022Updated 10/24/2026

CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerability

Affects SonicWall SMA100Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/28/2022
KEV deadline: 04/18/2022
EPSS: 4.0% chance of exploitation in 30 days – higher than 90% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-7483 (opens in a new tab)

Description

CVE-2019-7483 is a high-severity unauthenticated directory traversal vulnerability in SonicWall SMA100 devices. It exists in the handleWAFRedirect CGI, allowing attackers to test for the presence of files on the server. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

The SonicWall SMA100 product contains an unauthenticated directory traversal vulnerability identified as CVE-2019-7483. This flaw exists in the handleWAFRedirect CGI component and allows an attacker to probe the server's file system by testing for the presence of arbitrary files. The vulnerability does not require authentication, increasing its risk. It has been observed to be exploited in the wild. No vendor advisory or patch information is provided in the input data.

Impact

An unauthenticated attacker can leverage this vulnerability to determine the existence of files on the SMA100 server, potentially aiding further attacks or information disclosure. The vulnerability's exploitation in the wild indicates active threat usage. However, no direct data on further compromise or impact beyond file presence testing is provided.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the SMA100 management interface to trusted networks and monitor for suspicious activity related to handleWAFRedirect CGI requests.

Weaknesses

CWE-22Path Traversal (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:12:08 UTC

Weaknesses

References

Related threats