SonicWall SMA1000 Missing Authorization Vulnerability

概要

参考情報

• psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-40602

sma8200v のその他の脆弱性

• CVE-2026-83549高 7.8悪用確認済み（CISA KEV）Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi…
• CVE-2026-83548緊急 10.0悪用確認済み（CISA KEV）A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r…
• CVE-2026-15410高 7.2悪用確認済み（CISA KEV）Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Man…
• CVE-2026-15409緊急 10.0悪用確認済み（CISA KEV）A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticat…
• CVE-2026-4116高 7.2Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/C…