Multiple vulnerabilities have been reported in SonicWall Secure Mobile Access (SMA) 1000 Series appliances, which could allow an attacker to direct the appliance to access internal functionality and perform unauthorized operations, execute arbitrary operating system commands, perform unauthorized file operations, or inject malicious scripts into web pages, potentially affecting the confidentiality, integrity and availability of the targeted systems.
Target Audience:
All organizations and individuals using affected SonicWall SMA 1000 Series appliances.
Risk Assessment:
High to critical risk due to SSRF, remote code execution, path traversal, and stored cross-site scripting.
Impact Assessment:
Potential for unauthorized operations, arbitrary OS command execution, unauthorized file access, exposure of sensitive information.
The information provided herein is on "as is" basis, without warranty of any kind.