Description
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA100 | 10.2.1.14-75sv and earlier versions | — |
Advisories 2
- NCSC-2025-0145 Kwetsbaarheden verholpen in SonicWall SMA100 NCSC-NL (Netherlands) · May 8, 2025
- WID-SEC-2025-0984 SonicWall SMA: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 7, 2025
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011 vendor-advisory