2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","platforms":["Linux","Windows"],"product":"Email Security","vendor":"SonicWall","versions":[{"status":"affected","version":"10.0.34.8215 and earlier versions"},{"status":"affected","version":"10.0.34.8223 and earlier versions"}]}],"source":"PSIRT@sonicwall.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","matchCriteriaId":"AD63C704-413C-43B7-9475-A19411E3BF6B","versionEndExcluding":"10.0.35.8405","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:esa5000:-:*:*:*:*:*:*:*","matchCriteriaId":"91ED89A0-CFFB-44D3-8DE8-64E8DB635872","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa5050:-:*:*:*:*:*:*:*","matchCriteriaId":"69CD3296-0424-46C7-82F1-3BE7892B72C2","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa7000:-:*:*:*:*:*:*:*","matchCriteriaId":"3FE6D8AA-F614-404A-9006-A94763AA23B5","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa7050:-:*:*:*:*:*:*:*","matchCriteriaId":"F748C59C-740B-4F52-9E0D-70F7D4E9AA07","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa9000:-:*:*:*:*:*:*:*","matchCriteriaId":"7D46ECFF-FA41-4861-A047-1EEFD89D13DD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database."},{"lang":"es","value":"Una vulnerabilidad existe en el dispositivo SonicWall Email Security debido a una sanitización de entrada incorrecta que puede llevar a la corrupción de datos, permitiendo que un atacante remoto autenticado como usuario administrador podría explotar este problema al proporcionar una entrada manipulada que corrompe la base de datos de la aplicación."}],"id":"CVE-2026-3470","lastModified":"2026-07-24T20:10:00.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":3.8,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.2,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3470","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-31T20:34:11.598748Z","version":"2.0.3"}}]},"published":"2026-03-31T21:16:33.363","references":[{"source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002"}],"sourceIdentifier":"PSIRT@sonicwall.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"PSIRT@sonicwall.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|