Published: 02/04/2019 Updated: 09/10/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote malicious users to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and previous versions, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Vulnerable Product	Search on Vulmon	Subscribe to Product
sonicwall sonicos 6.2.7.3
sonicwall sonicos 6.5.1.3
sonicwall sonicos 6.5.2.2
sonicwall sonicos 6.5.3.1
sonicwall sonicos
sonicwall sonicos 6.2.7.8
sonicwall sonicos 6.5.1.8
sonicwall sonicosv 6.5.0.2-8v_rc363
sonicwall sonicosv 6.5.0.2.8v_rc367
sonicwall sonicosv 6.5.0.2.8v_rc368
sonicwall sonicosv 6.5.0.2.8v_rc366
sonicwall sonicos 6.4.0.0
sonicwall sonicos 6.0.5.3-86o

New TLS Padding Oracles

TLS Padding Oracles The TLS protocol provides encryption, data integrity, and authentication on the modern Internet Despite the protocol’s importance, currently-deployed TLS versions use obsolete cryptographic algorithms which have been broken using various attacks One prominent class of such attacks is CBC padding oracle attacks These attacks allow an adversary to dec

New TLS Padding Oracles

TLS Padding Oracles The TLS protocol provides encryption, data integrity, and authentication on the modern Internet Despite the protocol’s importance, currently-deployed TLS versions use obsolete cryptographic algorithms which have been broken using various attacks One prominent class of such attacks is CBC padding oracle attacks These attacks allow an adversary to dec

CWE-327 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003 https://nvd.nist.gov https://github.com/tls-attacker/TLS-Padding-Oracles

CVE-2019-7477

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect