SonicWall · SMA100 Appliances
CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Cos'è
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
CISA: SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.
Cosa fare
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Scadenza per le agenzie federali USA: 22 maggio 2025
Altre falle sfruttate di SonicWall
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 16 apr 2025 | OS Command Injection | SMA100 Appliances | Media 6,5 | 4,4% |
| 2 set 2026 | Server-Side Request Forgery | SMA1000 Appliances | Critica 10,0 | 8,0% |
| 2 set 2026 | OS Command Injection | SMA1000 Appliances | Alta 7,8 | 9,9% |
| 14 lug 2026 | Server-Side Request Forgery | SMA1000 Appliances | Critica 10,0 | 6,8% |
| 14 lug 2026 | Code Injection | SMA1000 Appliances | Alta 7,2 | 12% |
| 17 dic 2025 | SMA1000 Missing Authorization | SMA1000 appliance | Media 6,6 | 2,8% |
| 18 feb 2025 | SSLVPN Improper Authentication | SonicOS | Alta 8,2 | 95% |
| 24 gen 2025 | Deserialization | SMA1000 Appliances | Critica 9,8 | 23% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.