PatchTheCVEsundray wan controller firmware vulnerabilities and fixes
Recent CVEs affecting sundray wan controller firmware, with upgrade or downgrade steps. 2 tracked.
Also searched as: sundraywancontrollerfirmware.
sundray wan controller firmware has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-04-18. Highest priority: CVE-2019-9161 (score 62/100).
- CVE-2019-9161 CRITICAL 9.8 UPGRADE WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allow
- CVE-2019-9160 CRITICAL 9.8 UPGRADE WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remot
FAQ
How do I fix sundray wan controller firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sundray wan controller firmware being exploited right now?
None of the tracked sundray wan controller firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sundray wan controller firmware CVE should I patch first?
CVE-2019-9161 currently ranks highest (62/100): WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allow.