Description:
SonicWall has released a security advisory to address multiple vulnerabilities in SMA 100 series products. A remote authenticated attacker could exploit the vulnerabilities by sending specially crafted requests to an affected system.
Affected Systems:
- SonicWall SMA 100 series prior to version 10.2.1.10-62sv
For detailed information of the affected products, please refer to the corresponding security advisory at vendor's website.
Impact:
Depending on the vulnerabilities being exploited, a successful exploitation could lead to arbitrary command injection or security restriction bypass on the affected system.
Recommendation:
Software updates or patches for affected systems are now available. Administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5970
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44221
