CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Access Control
Summary: a vulnerability in sonicwall sonicos and sonicosv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. this vulnerability affected sonicos gen 5 version 5.9.1.10 and earlier, gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and sonicosv 6.5.0.2-8v_rc363 (vmware), 6.5.0.2.8v_rc367 (azure), sonicosv 6.5.0.2.8v_rc368 (aws), sonicosv 6.5.0.2.8v_rc366 (hyper_v).
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-04-02
Last Modified Date: 2019-10-09