« Volver al listado

CVE-2026-4113

Estado: AnalizadaAlta (7.2)—

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso a red remota con privilegios (PR:H); CWE-204 (respuesta observable) + descripción de enumeración de credenciales SSL VPN sugiere T1589.001 (credenciales de usuario). T1040 (captura de tráfico/discrepancia de respuesta) como impacto secundario.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Network SegmentationVulnerability ScanningUser Account ManagementThreat Intelligence ProgramPrivileged Account ManagementMulti-factor Authentication

Tecnologías afectadas (5)

Sonicwall — Sma6200 FirmwareSonicwall — Sma6210 FirmwareSonicwall — Sma7200 FirmwareSonicwall — Sma7210 FirmwareSonicwall — Sma8200v

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-4113",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-4113",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-04-13T18:27:00.386461Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT@sonicwall.com",
      "affectedData": [
        {
          "vendor": "SonicWall",
          "product": "SMA1000",
          "versions": [
            {
              "status": "affected",
              "version": "12.4.3-03245 (platform-hotfix) and earlier versions."
            },
            {
              "status": "affected",
              "version": "12.5.0-02283 (platform-hotfix) and earlier versions."
            }
          ],
          "platforms": [
            "Linux"
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2026-04-09T15:16:13.683",
  "references": [
    {
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT@sonicwall.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "PSIRT@sonicwall.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-204"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials."
    }
  ],
  "lastModified": "2026-06-17T10:56:00.557",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DBCAA68-BFC4-4282-BE32-5BE837C01D78",
              "versionEndExcluding": "12.4.3-03387"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A037764-3A32-4BDA-9A30-5B37C18CD08D",
              "versionEndExcluding": "12.5.0-02624",
              "versionStartIncluding": "12.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9C76A87-8E12-493D-8F14-D73D83DF641E",
              "versionEndExcluding": "12.4.3-03387"
            },
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48715079-B463-4626-971E-203EB3EDDAAB",
              "versionEndExcluding": "12.5.0-02624",
              "versionStartIncluding": "12.5.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C562F03-50C0-4ED7-8AD6-4CF3C5862D13",
              "versionEndExcluding": "12.4.3-03387"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFF37E70-755D-425E-84C6-DDB975288187",
              "versionEndExcluding": "12.5.0-02624",
              "versionStartIncluding": "12.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3616EEFA-CEB8-4E9C-A53C-356C78DC1244",
              "versionEndExcluding": "12.4.3-03387"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FE09110-AA3D-4466-8C32-2480D1135AF7",
              "versionEndExcluding": "12.5.0-02624",
              "versionStartIncluding": "12.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "987A8BE1-77A9-4672-933B-ACD501DD3AB4",
              "versionEndExcluding": "12.4.3-03387"
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87A919DB-A894-4ED9-8934-C7C007AACF68",
              "versionEndExcluding": "12.5.0-02624",
              "versionStartIncluding": "12.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "57B3C90F-F633-41B9-855E-902F6DC8ACA5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "PSIRT@sonicwall.com"
}