The vulnerability of the implementation of the SSL VPN technology using the micro-programming software for network interfaces of the SMA 100 series, which allows a intruder to execute any command they desire.

🗓️ 02 May 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

SonicWall SMA 100 SSL VPN flaw allows arbitrary command execution via unsanitized system commands.

Reporter	Title	Published	Views	Family All 262
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2024-38475) affects Power HMC.	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server	29 Jul 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities (CVE-2024-38477, CVE-2021-38963, CVE-2024-38475, CVE-2024-38474)	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in http-server affect Cloud Pak System	29 Oct 202410:37	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	22 May 202521:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Apache HTTP, OpendJDK, python3 and spring-web affect IBM Cloud Object Storage Systems (Sept 2024v1)	19 Sep 202403:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server.	26 Jul 202413:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could allow an attacker to map URLs to filesystem locations that are unreachable by any URL CVE-2024-38475	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server and Java, affect IBM Tivoli Monitoring.	5 Sep 202419:12	–	ibm

Vulners

Node

sonicwall sma_100Range≤10.2.1.9-57sv

sonicwall sma_200Range≤10.2.1.9-57sv

sonicwall sma_210Range≤10.2.1.9-57sv

sonicwall sma_400Range≤10.2.1.9-57sv

sonicwall sma_410Range≤10.2.1.9-57sv

sonicwall sma_500vRange≤10.2.1.9-57sv

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018
labs	www.labs.watchtowr.com/sonicboom-from-stolen-tokens-to-remote-shells-sonicwall-sma100-cve-2023-44221-cve-2024-38475/
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

28 May 2025 00:00Current

CVSS 37.2

CVSS 28.3

EPSS0.93858