attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
SonicWall Network Security Manager (NSM)
Classified as
CWE-863 (Incorrect Authorization)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
SonicWall
Network Security Manager (NSM)
Subsystems
General OT
Sectors
Multiple
What to Know
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance. (NVD)
What to Do
Monitor SonicWall's web page for any future patch releases.