high7.2Known exploited
CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-05-01. Federal due date: 2025-05-22.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 200 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 210 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 400 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 410 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 500v Firmware | through 10.2.1.9-57sv |