🔴 Critical: SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
-
SonicWall has issued hotfixes for four vulnerabilities affecting its SMA1000 appliances, the gateways that provide remote workers with access to corporate networks and applications. The most severe of the four carries a CVSS score of 10.0 and is a pre-authentication SSRF flaw — meaning an attacker could exploit it without logging in, using the appliance to send requests that reach internal functions.
According to SonicWall, there is currently no evidence that any of the four flaws has been exploited in the wild.
Key points:
- Affected product: SonicWall SMA1000 appliances
- Four flaws patched via hotfix
- Most critical issue: pre-authentication SSRF, rated CVSS 10.0
- No known exploitation of any of the four flaws at this time
Administrators running SMA1000 devices should apply the available hotfixes as soon as possible and review their exposure, particularly given the unauthenticated nature of the highest-severity issue.
Source: The Hacker News
Does your organization run SMA1000 appliances, and have you already applied the hotfixes?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login