CVE-2023-44221
🔥 Known Exploited (CISA KEV)HIGH
7.2
CVSS Severity Score
Vulnerability Description
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
Affected Platforms (CPE)
💻
Sonicwall
Sma 200 Firmware
<= 10.2.1.9-57sv
💻
Sonicwall
Sma 210 Firmware
<= 10.2.1.9-57sv
💻
Sonicwall
Sma 400 Firmware
<= 10.2.1.9-57sv
💻
Sonicwall
Sma 410 Firmware
<= 10.2.1.9-57sv