2 lines
5.1 KiB
JSON
2 lines
5.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","platforms":["Linux"],"product":"SMA1000","vendor":"SonicWall","versions":[{"status":"affected","version":"12.4.3-03245 (platform-hotfix) and earlier versions."},{"status":"affected","version":"12.5.0-02283 (platform-hotfix) and earlier versions."}]}],"source":"PSIRT@sonicwall.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4DBCAA68-BFC4-4282-BE32-5BE837C01D78","versionEndExcluding":"12.4.3-03387","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9A037764-3A32-4BDA-9A30-5B37C18CD08D","versionEndExcluding":"12.5.0-02624","versionStartIncluding":"12.5.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"987A8BE1-77A9-4672-933B-ACD501DD3AB4","versionEndExcluding":"12.4.3-03387","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"87A919DB-A894-4ED9-8934-C7C007AACF68","versionEndExcluding":"12.5.0-02624","versionStartIncluding":"12.5.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6C562F03-50C0-4ED7-8AD6-4CF3C5862D13","versionEndExcluding":"12.4.3-03387","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BFF37E70-755D-425E-84C6-DDB975288187","versionEndExcluding":"12.5.0-02624","versionStartIncluding":"12.5.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3616EEFA-CEB8-4E9C-A53C-356C78DC1244","versionEndExcluding":"12.4.3-03387","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0FE09110-AA3D-4466-8C32-2480D1135AF7","versionEndExcluding":"12.5.0-02624","versionStartIncluding":"12.5.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","matchCriteriaId":"E9C76A87-8E12-493D-8F14-D73D83DF641E","versionEndExcluding":"12.4.3-03387","vulnerable":true},{"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","matchCriteriaId":"48715079-B463-4626-971E-203EB3EDDAAB","versionEndExcluding":"12.5.0-02624","versionStartIncluding":"12.5.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator."},{"lang":"es","value":"Neutralización incorrecta de elementos especiales utilizados en un comando SQL (’inyección SQL’) en dispositivos SonicWall de la serie SMA1000 permite a un atacante remoto autenticado con privilegios de administrador de solo lectura escalar privilegios a administrador principal."}],"id":"CVE-2026-4112","lastModified":"2026-10-26T21:10:00.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4112","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-10T03:56:04.484507Z","version":"2.0.3"}}]},"published":"2026-04-09T15:16:13.517","references":[{"source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003"}],"sourceIdentifier":"PSIRT@sonicwall.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"PSIRT@sonicwall.com","type":"Secondary"}]}
|