CVE-2023-44221 SonicWall SMA100 Appliances
SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.
- CVSS
- not scored
On CISA’s exploited list
SonicWall SMA100 Appliances OS Command Injection Vulnerability
- Added
- 2025-05-01
- Federal patch deadline
- 2025-05-22
- Ransomware use
- not known