Menu

Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Sign In Register

SMA100 Post-Authentication Remote Command Execution Vulnerability

EnaEna SonicWall Employee
in Secure Mobile Access Appliances

Hello All 🖐️

Please note that improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Command as a 'root' user which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.

For more information, check out this KB article: https://www.sonicwall.com/support/product-notification/sma100-post-authentication-remote-command-execution-vulnerability/220517081626487/

Category: Secure Mobile Access Appliances
Reply
Sign In or Register to comment.