CVE-2023-44221
high · 7.2Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Added 2025-05-01Remediation due 2025-05-22
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
7.2
CVSS
76.3%
EPSS (exploit prob.)
100th
EPSS percentile
2023-12-05
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sma_200_firmware | <= 10.2.1.9-57sv |
| sonicwall | sma_200 | all versions |
| sonicwall | sma_210_firmware | <= 10.2.1.9-57sv |
| sonicwall | sma_210 | all versions |
| sonicwall | sma_400_firmware | <= 10.2.1.9-57sv |
| sonicwall | sma_400 | all versions |
| sonicwall | sma_410_firmware | <= 10.2.1.9-57sv |
| sonicwall | sma_410 | all versions |
| sonicwall | sma_500v_firmware | <= 10.2.1.9-57sv |
| sonicwall | sma_500v | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-44221