CVE-2023-44221

🗓️ 05 Dec 2023 20:10:35Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 250 Views

Improper neutralization of special elements in SMA100 SSL-VPN management interface allows remote authenticated attacker to inject arbitrary commands

Reporter	Title	Published	Views	Family All 23
attackerkb	CVE-2023-44221	5 Dec 202300:00	–	attackerkb
BDU FSTEC	SMA 100 series SSL VPN Command Execution	2 May 202400:00	–	bdu_fstec
Circl	CVE-2023-44221	24 Dec 202315:26	–	circl
CISA KEV Catalog	SonicWall SMA100 Appliances OS Command Injection Vulnerability	1 May 202500:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	1 May 202512:00	–	cisa
CNNVD	SONICWALL SMA100 SSL-VPN Security Vulnerability	5 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-44221	5 Dec 202320:10	–	cvelist
HackRead	watchTowr Warns of Active Exploitation of SonicWall SMA 100 Devices	3 May 202521:26	–	hackread
Kitploit	sonicwall-audit-toolkit	30 Oct 202623:17	–	kitploit
Kitploit	watchTowr-vs-SonicWall-PreAuth-RCE-Chain	31 Oct 202614:20	–	kitploit

NVD

Vulners

Node

AND

sonicwall sma_200_firmwareRange≤10.2.1.9-57sv

sonicwall sma_200Match-

Node

AND

sonicwall sma_210_firmwareRange≤10.2.1.9-57sv

sonicwall sma_210Match-

Node

AND

sonicwall sma_400_firmwareRange≤10.2.1.9-57sv

sonicwall sma_400Match-

Node

AND

sonicwall sma_410_firmwareRange≤10.2.1.9-57sv

sonicwall sma_410Match-

Node

AND

sonicwall sma_500v_firmwareRange≤10.2.1.9-57sv

sonicwall sma_500vMatch-

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "SMA 200",
      "SMA 210",
      "SMA 400",
      "SMA 410",
      "SMA 500v"
    ],
    "product": "SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.1.9-57sv and earlier versions"
      }
    ]
  }
]