Description
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA100 | 10.2.1.9-57sv and earlier versions | — |
Advisories 1
- WID-SEC-2023-3054 SonicWall SMA: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2025
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018 vendor-advisory