Lucene search
HistoryDec 05, 2023 - 9:15 p.m.
CVE-2023-44221
cve-2023-44221
sma100
ssl-vpn
os command injection
remote attacker
administrative privilege
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.8%
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a ‘nobody’ user, potentially leading to OS Command Injection Vulnerability.
Affected configurations
Node
sonicwallsma_200Match-
sonicwallsma_200_firmwareRange≤10.2.1.9-57sv
Node
sonicwallsma_210_firmwareRange≤10.2.1.9-57sv
sonicwallsma_210Match-
Node
sonicwallsma_400_firmwareRange≤10.2.1.9-57sv
sonicwallsma_400Match-
Node
sonicwallsma_410_firmwareRange≤10.2.1.9-57sv
sonicwallsma_410Match-
Node
sonicwallsma_500v_firmwareRange≤10.2.1.9-57sv
sonicwallsma_500vMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sonicwall | sma_200 | - | cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:* |
| sonicwall | sma_200_firmware | * | cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:* |
| sonicwall | sma_210_firmware | * | cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:* |
| sonicwall | sma_210 | - | cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:* |
| sonicwall | sma_400_firmware | * | cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:* |
| sonicwall | sma_400 | - | cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:* |
| sonicwall | sma_410_firmware | * | cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:* |
| sonicwall | sma_410 | - | cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:* |
| sonicwall | sma_500v_firmware | * | cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:* |
| sonicwall | sma_500v | - | cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-44221
2023-12-05 21:15:07
cvelist
cvelist
CVE-2023-44221
2023-12-05 20:10:35
prion
prion
Command injection
2023-12-05 21:15:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.8%
Related for NVD:CVE-2023-44221