Description
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA 100 Series | 10.2.1.15-81sv and earlier versions | — |
Advisories 1
- WID-SEC-2025-1629 SonicWall SMA 100 Serie: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 23, 2025
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014 vendor-advisory