---
id: "CVE-2019-7481"
kind: "vulnerability"
aliases: ["CVE-2019-7481"]
title: "SonicWall SMA100: SonicWall SMA100 SQL Injection Vulnerability"
severity: "high"
cvss: 7.5
epss: 0.99906
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "SonicWall SMA100", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "ransomware", "self-hosted", "sma100", "sonicwall", "vpn"]
not_affected_if: ["not-sma100", "patched-firmware"]
published_at: "2019-12-17T23:15:14+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7481", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-7481", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7481", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# SonicWall SMA100: SonicWall SMA100 SQL Injection Vulnerability

SonicWall SMA100 SSL VPN appliances contain an SQL injection flaw that lets an unauthenticated remote user read data they should not see. CISA lists it as actively exploited, and the KEV tag notes ransomware use.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SonicWall SMA100 affected ? fixed ?

## How to check

Check the SMA100 firmware version under the appliance's System > Status page against the vendor advisory: unknown from sources.

## Fix

Apply the SonicWall SMA100 firmware update per vendor instructions; the specific fixed version is unknown from sources.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7481
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2019-7481
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-7481

## From the sources

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_