CVE Vulnerability Advisory Database

[Affected Scope] SonicWall firewall appliances running SonicOS 7.x and 6.5.x with SSLVPN service enabled.

[Impact] Attackers with valid credentials for alternate authentication methods can bypass SAML controls and enforced MFA to gain unauthorized network access.

[Mitigation] Immediately apply the latest firmware updates provided by SonicWall and audit SSLVPN access logs for suspicious activity.

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) management interface

[Impact] A remote authenticated attacker with administrator privileges can execute arbitrary OS commands under specific conditions, leading to complete system compromise

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict access to the AMC management interface

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise

[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface

[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)

[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands under specific conditions, potentially leading to full system compromise

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall and restrict external access to the management console

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE

[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface

[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)

[Impact] High-privileged attackers can exploit insufficient authorization to escalate privileges to root, leading to complete system compromise

[Mitigation] Apply the official security patches immediately and restrict network access to the management console

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)

[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles

[Affected Scope] SonicWall SMA (Secure Mobile Access) appliances and firmware utilizing the SSLVPN authentication mechanism

[Impact] Remote unauthenticated attackers can completely bypass authentication, gain administrative access, and compromise the internal network

[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the SSLVPN interface

[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions

[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall

[Affected Scope] SonicWall SMA100 series (SMA 200, 210, 400, 410, 500v) running firmware versions 10.2.1.11-63sv and below.

[Impact] A remote authenticated attacker with administrative privileges can inject arbitrary OS commands via the management interface, executing them with 'nobody' user privileges.

[Mitigation] Immediately upgrade the SMA100 firmware to the patched version (10.2.1.12-65sv or higher) and restrict access to the management interface.

[Affected Scope] SonicWall SMA 200, 210, 400, 410, and 500v appliances running firmware versions 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv, and earlier

[Impact] A remote unauthenticated attacker can execute arbitrary code with 'nobody' user privileges on the appliance by sending a specially crafted HTTP request, potentially leading to full system compromise

[Mitigation] Immediately upgrade the appliance firmware to the patched version (10.2.1.3-27sv or higher) and restrict external access to the management interface

[Affected Scope] SonicWall SMA 100 series firmware versions 10.2.1.1-29sv and earlier, 10.2.0.8-37sv and earlier, and 9.0.0.11-31sv and earlier

[Impact] A remote authenticated attacker can inject arbitrary commands via the management interface, executing code as the 'nobody' user and potentially causing a Denial of Service (DoS)

[Mitigation] Immediately upgrade the SMA 100 firmware to the latest patched versions (e.g., 10.2.1.2-34sv or higher) as recommended by the vendor

[Affected Scope] End-of-life (EOL) SonicWall Secure Remote Access (SRA) appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via crafted payloads, potentially leading to credential theft, database compromise, and remote code execution (RCE)

[Mitigation] Since the affected products are EOL, immediately decommission the SRA appliances and migrate to supported SMA (Secure Mobile Access) series, or restrict external access via firewall rules

[Affected Scope] SonicWall Email Security version 10.0.9.x.

[Impact] A post-authenticated attacker can exploit directory traversal to read arbitrary files on the remote host, potentially exposing sensitive system configurations and credentials.

[Mitigation] Immediately upgrade to the patched version (10.0.9.6173 or higher) as recommended by the vendor.

[Affected Scope] SonicWall Email Security version 10.0.9.x

[Impact] A post-authenticated attacker can upload arbitrary files to the remote host, potentially leading to remote code execution with system privileges

[Mitigation] Immediately upgrade to the official patched version (10.0.9.6173 or higher)

[Affected Scope] On-premises and virtual appliance deployments of SonicWall Email Security running version 10.0.9.x.

[Impact] Unauthenticated remote attackers can create administrative accounts by sending crafted HTTP requests, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched firmware version (10.0.9.6173, 10.0.10, or higher).

[Affected Scope] SonicWall SMA100 appliances running firmware build version 10.x

[Impact] Unauthenticated remote attackers can execute arbitrary SQL queries to retrieve usernames, passwords, and active session information, leading to complete device compromise

[Mitigation] Immediately upgrade the SMA100 firmware to version 10.2.0.5 or higher to apply official security patches

[Affected Scope] SonicWall firewall appliances running SonicOS Gen 6 (prior to 6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv (prior to 6.5.4.v), and Gen 7 (prior to 7.0.0.0)

[Impact] An unauthenticated remote attacker can trigger a Denial of Service (DoS) or potentially execute arbitrary code with root privileges by sending a specially crafted HTTP request to the firewall

[Mitigation] Immediately upgrade to the patched firmware versions provided by SonicWall and restrict external access to the management interface

[Affected Scope] SonicWall SMA100 series firmware versions 9.0.0.3-17sv and prior

[Impact] Unauthenticated remote attackers can exploit directory traversal to test for the presence of arbitrary files on the server, mapping out sensitive system structures

[Mitigation] Immediately upgrade the SMA100 firmware to the latest secure version (9.0.0.4 or higher) as recommended by SonicWall

[Affected Scope] SonicWall SMA100 firmware version 9.0.0.3 and earlier

[Impact] Unauthenticated remote attackers can exploit a SQL injection vulnerability to gain unauthorized read-only access to sensitive database resources and system information

[Mitigation] Immediately upgrade the SMA100 firmware to a patched version (9.0.0.4 or later)