CVE-2018-9867: Medium severity sonicwall sonicos vulnerability
In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8vRC363 (VMWARE), 6.5.0.2.8vRC367 (AZURE), SonicOSv 6.5.0.2.8vRC368 (AWS), SonicOSv 6.5.0.2.8vRC366 (HYPERV).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SonicWall SonicOS vulnerability?
The vulnerability ID for this SonicWall SonicOS vulnerability is CVE-2018-9867.
Who is affected by this vulnerability?
Administrators without full permissions in SonicWall SonicOS are affected by this vulnerability.
Which versions of SonicOS are affected by this vulnerability?
SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.0.5.3-86o, 6.2.7.3, 6.2.7.8, 6.4.0.0, 6.5.1.3, 6.5.1.8, 6.5.2.2, and 6.5.3.1 are affected by this vulnerability.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium, with a severity value of 5.5.
How can I protect myself from this vulnerability?
To protect yourself from this vulnerability, ensure that administrators without full permissions are not allowed to download imported certificates in SonicWall SonicOS.