CVE-2023-44221
05.12.2023, 21:15
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
| Vendor | Product | Version |
|---|---|---|
| sonicwall | sma_200_firmware | 𝑥 ≤ 10.2.1.9-57sv |
| sonicwall | sma_210_firmware | 𝑥 ≤ 10.2.1.9-57sv |
| sonicwall | sma_400_firmware | 𝑥 ≤ 10.2.1.9-57sv |
| sonicwall | sma_410_firmware | 𝑥 ≤ 10.2.1.9-57sv |
| sonicwall | sma_500v_firmware | 𝑥 ≤ 10.2.1.9-57sv |
𝑥
= Vulnerable software versions