TLDR Tech / InfoSec
SonicWall Warns of SMA1000 Flaws Exploited in Zero-Day Attacks
SonicWall warned that threat actors are exploiting two vulnerabilities in its SMA1000 appliances. The first vulnerability is a critical (CVSS 10) SSRF vulnerability in the Appliance Work Place interface that allows remote, unauthenticated attackers to force an appliance to make requests to unintended locations. The second vulnerability is a high (CVSS 7.2) post-authentication code injection vulnerability in the Appliance Management Console that could allow remote, authenticated admins to execute arbitrary OS commands.
Read the full story