SonicWall SMA100 Directory Traversal Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 18, 2019 · Catalog

   Detected

   In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

2. Mar 28, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 18, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

Affected

• cpe sonicwall/sma 100 firmwareversion unspecified
• vendor SonicWall SMA100version unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2019-7483

  In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

  cisa.gov
• CVE.orgVulnerability recordCVE-2019-7483

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2019-7483

  30-day exploitation probability 4.0%

  first.org
• NIST NVDVulnerability recordCVE-2019-7483

  In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Vendor Advisory · psirt.global.sonicwall.com
• US Government Resource · cisa.gov