First published: Mon Dec 23 2019(Updated: )
Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.
Credit: PSIRT@sonicwall.com
Affected Software | Affected Version | How to fix |
---|---|---|
SonicWall Email Security | <=10.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-7488 has been classified as a high severity vulnerability due to the potential for unauthorized access to sensitive database information.
To mitigate CVE-2019-7488, update the SonicWall Email Security appliance to a version later than 10.0.2 and change any default passwords immediately.
CVE-2019-7488 affects SonicWall Email Security appliance versions 10.0.2 and earlier.
Exploiting CVE-2019-7488 allows attackers to gain unauthorized access to the appliance database, potentially compromising sensitive information.
The best workaround for CVE-2019-7488 is to promptly change default passwords and ensure the appliance is updated to a secure version.