SonicWall SMA100 Appliances OS Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 16/04/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| sma 500v | ≥ 10.2.0.0, < 10.2.0.8-37sv≥ 10.2.1.0, < 10.2.1.1-19sv< 9.0.0.11-31sv | 10.2.0.8-37sv10.2.1.1-19sv9.0.0.11-31sv |
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free