CVE-2019-7477: High severity sonicwall sonicos vulnerability
A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8vRC363 (VMWARE), 6.5.0.2.8vRC367 (AZURE), SonicOSv 6.5.0.2.8vRC368 (AWS), SonicOSv 6.5.0.2.8vRC366 (HYPERV).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2019-7477?
CVE-2019-7477 is a vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher that allows remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled.
Which versions of SonicWall SonicOS are affected by CVE-2019-7477?
SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 versions 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, and 6.5.1.8 are affected by CVE-2019-7477.
What is the severity of CVE-2019-7477?
The severity of CVE-2019-7477 is high, with a severity value of 7.5.
How can I fix the vulnerability CVE-2019-7477?
To fix the vulnerability, update SonicOS to a version that is not affected by CVE-2019-7477.
Where can I find more information about CVE-2019-7477?
You can find more information about CVE-2019-7477 at the following link: [https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003)