« Volver al listado

CVE-2018-9867

Estado: ModificadaMedia (5.5)—

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Sonicwall — SonicosSonicwall — Sonicosv

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-9867",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT@sonicwall.com",
      "affectedData": [
        {
          "vendor": "SonicWall",
          "product": "SonicOS",
          "versions": [
            {
              "status": "affected",
              "version": "5.9.1.10 and earlier"
            },
            {
              "status": "affected",
              "version": "6.2.7.3"
            },
            {
              "status": "affected",
              "version": "6.5.1.3"
            },
            {
              "status": "affected",
              "version": "6.5.2.2"
            },
            {
              "status": "affected",
              "version": "6.5.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.7.8"
            },
            {
              "status": "affected",
              "version": "6.4.0.0"
            },
            {
              "status": "affected",
              "version": "6.5.1.8"
            },
            {
              "status": "affected",
              "version": "6.0.5.3-86o"
            }
          ]
        },
        {
          "vendor": "SonicWall",
          "product": "SonicOSv",
          "versions": [
            {
              "status": "affected",
              "version": "6.5.0.2-8v_RC363 (VMWARE)"
            },
            {
              "status": "affected",
              "version": "6.5.0.2.8v_RC367 (AZURE)"
            },
            {
              "status": "affected",
              "version": "6.5.0.2.8v_RC368 (AWS)"
            },
            {
              "status": "affected",
              "version": "6.5.0.2.8v_RC366 (HYPER_V)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-02-19T21:29:00.320",
  "references": [
    {
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT@sonicwall.com"
    },
    {
      "url": "https://www.tenable.com/security/research/tra-2019-08",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "PSIRT@sonicwall.com"
    },
    {
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.tenable.com/security/research/tra-2019-08",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "PSIRT@sonicwall.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."
    },
    {
      "lang": "es",
      "value": "En SonicWall SonicOS, los administradores sin permisos completos pueden descargar certificados importados. Ocurre cuando los administradores que no están en el grupo de usuarios de SonicWall Administrators intentan descargar certificados importados. Esta vulnerabilidad afectó a SonicOS Gen 5 versión 5.9.1.10 y anteriores, Gen 6 versiones 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o y SonicOSv versiones 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv versión 6.5.0.2.8v_RC368 (AWS), SonicOSv versión 6.5.0.2.8v_RC366 (HYPER_V)."
    }
  ],
  "lastModified": "2026-06-17T02:07:19.150",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88AC25CE-9B3C-491B-877E-0BAB68B9CCFC",
              "versionEndIncluding": "5.9.1.10",
              "versionStartIncluding": "5.0.0.0"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6064655E-6480-4A34-843C-B29C72527111"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.2.7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5567146C-301D-469A-A3E3-1B70D5C9BDCC"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.2.7.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A25F675E-CD61-46F0-92A2-218C956E0AD5"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.4.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C30B8BB4-E0A7-4060-8EED-AE7E42811C86"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93F31397-0142-439F-BFEC-C77F3D4B7825"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "095E558D-C241-45A4-AA4E-76B3621E341D"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACC28FE5-5064-4FEE-8EA0-047C8BA31601"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicos:6.5.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "248847AC-1910-448A-BA78-DC6BE942407E"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:*:*:*:*:vmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D76E63B8-63A0-4283-9BB4-89139E4CADE4"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:*:*:*:*:hyper_v:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78C8A7D6-30CB-40E1-BF67-0E660EF62DF7"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:*:*:*:*:azure:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C6F0305-2590-45EB-A0C0-3F2417EF57FF"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:*:*:*:*:aws:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDE650F8-9373-483F-847C-14987A1832E6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT@sonicwall.com"
}