CVE-2019-7483

CVE-2019-7483 is an unauthenticated directory traversal flaw (CWE-22) in the handleWAFRedirect CGI of SonicWall's SMA 100 series SSL-VPN appliances. A remote attacker triggers it by sending a crafted HTTP request to that CGI containing path-traversal sequences, and no credentials or user interaction are required. Per the vulnerability description, the flaw lets an attacker test for the presence of files on the server, and the CVSS 3.1 score of 7.5 rates the confidentiality impact as high, indicating meaningful information exposure. Any organization running a SonicWall SMA 100 appliance, typically deployed as an SMB or branch-office SSL-VPN gateway, is affected. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog on 2022-03-28, confirming exploitation in the wild, with an EPSS estimate of a 4.0% chance of exploitation in the next 30 days (90th percentile).

What to do: Apply the SMA 100 firmware update per SonicWall's instructions and CISA's required action, and verify patch status on every internet-facing appliance. Until patched, restrict or allowlist access to the appliance's web/SSL-VPN interface and review HTTP logs for suspicious unauthenticated requests to handleWAFRedirect CGI containing traversal sequences.