Description
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- SonicWall / SMA100012.4.3-03526 (platform-hotfix) and older versions – 12.4.3-03526 (platform-hotfix) and older versions
- SonicWall / SMA100012.5.0-02952 (platform-hotfix) and older versions – 12.5.0-02952 (platform-hotfix) and older versions
News coverage
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After PatchThe Hacker News · 15d ago
- Max severity SonicWall SMA1000 flaw now exploited in attacksBleepingComputer · 18d ago
References
Updated 22m ago · 8 sources