In SonicWall SonicOS, administrators without full permissions can download imported...

5.5 CVSS

Vulnerability Description

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-9867

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from SonicWall

View All →

CVE-2025-40605

A Path Traversal vulnerability has been identified in the Email...

Unknown 0

CVE-2025-40604

Download of Code Without Integrity Check Vulnerability in the SonicWall...

Unknown 0

CVE-2025-40603

A potential exposure of sensitive information in log files in...

Unknown 0

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in...

Unknown 0

CVE-2025-40601

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service...

Unknown 0

Affected Vendor

SonicWall

View all reports →

Affected Software

SonicOS, SonicOSv

Vulnerable Versions:

5.9.1.10 and earlier, 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o, 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), 6.5.0.2.8v_RC368 (AWS), 6.5.0.2.8v_RC366 (HYPER_V)