Description
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA100 | 10.2.1.14-75sv and earlier versions | — |
Advisories 2
- NCSC-2025-0145 Kwetsbaarheden verholpen in SonicWall SMA100 NCSC-NL (Netherlands) · May 8, 2025
- WID-SEC-2025-0984 SonicWall SMA: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 7, 2025
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011 vendor-advisory