CVE-2019-7482

SonicWall SMA/SRA 어플라이언스의 다중 취약점 CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 최초 게시: 2020년 2월 26일 14:00 GMT 상태: 개발 중 마지막 업데이트: 2020년 2월 26일 14:00 GMT CVSS 점수: 9.8 요약 2019년 12월 18일, SonicWall CSIRT는 SonicWall Secure Mobile Access SMA 어플라이언스에서 취약점을 식별하는 보안...

watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 事前認証RCEチェーン PoC SonicWall SMA 100 事前認証RCEチェーン CVE-2023-44221, CVE-2024-38475 の PoC 技術的な詳細はブログ記事をご覧ください。 https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoCの動作 python watchTowr-vs-SonicWall-PreAuth-RCE-Chain.py -t https://192.168.8.153/ -c ifconfig...

CVE-2026-15409

🚀 CVE-2026-15409 – 通过 WebSocket 代理实现 SonicWall SMA 1000 Erlang RCE CVE-2026-15409 的概念验证（PoC）漏洞利用 – 通过 WebSocket 隧道传输的 Erlang 分布式协议，在 SonicWall SMA 1000 系列设备上实现未认证的远程代码执行。 📖 概述 CVE-2026-15409 是一个影响 SonicWall SMA 1000 设备（2026 年 6 月热修复之前的所有版本）的严重漏洞。该缺陷位于 WorkPlace 服务 （通常暴露在 443 端口）中，该服务将 WebSocket...

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 露出検出ツール SonicWall Secure Mobile Access SMA 1000 シリーズのアプライアンスに影響する CVE-2026-83548 （Work Place インターフェースにおける事前認証 SSRF、CVSS 10.0）および CVE-2026-83549 （AMC における認証後 OS コマンドインジェクション、CVSS 7.8）を検出するための非侵襲型 検出スクリプトです。これらは認証なしの RCE に連鎖される、活発に悪用されている 2...

CVE-2026-4112

SonicWall SMA 8200v: クロスパラメータブラインドSQLインジェクションによる権限昇格 ファームウェア: 12.5.0-02283 12.5.0-02002ベース上のプラットフォームホットフィックス SonicWallアドバイザリ 1. 概要 SonicWall SMA...

cve-2024-53703-poc

cve-2024-53703-poc CVE-2024-53703을 악용하기 위한 POC로, SonicWall SMA modhttprp.so의 스택 기반 버퍼 오버플로우입니다...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602는 SonicWall Secure Mobile Access SMA 1000 시리즈 어플라이언스의 어플라이언스 관리 콘솔AMC에서 발생하는 로컬 권한 상승 취약점입니다. 이 취약점은 AMC의 부적절한 인가로 인해 발생하며, 인증된 원격 공격자가 영향을 받는 장치에서 권한을 상승시킬 수 있도록 합니다. CVE-2025-23006과 연쇄적으로 사용되면 공격자는 인증 없이 루트 권한으로 원격 코드 실행을 달성할 수 있습니다. 이 제로데이 취약점은 실제 환경에서 활발히 악용되고 있으며...

CVE-2025-40602

CVE-2025-40602 📌 概要 CVE-2025-40602 は、SonicWall Secure Mobile Access SMA 1000 シリーズアプライアンスに影響を与えるローカル権限昇格の脆弱性 です。 この欠陥は、Appliance Management Console AMC における不十分な認可チェック に起因し、認証された低権限ユーザーが権限を昇格させることが可能になります。 この脆弱性は、実際の攻撃 in the wild で積極的に悪用されている ことが確認されており、特に他の脆弱性と連鎖させてシステム全体を完全に侵害するために使用されています。 📝...

patch-CVE-2026-06555

パッチ: CVE-2026-06555 脆弱性の詳細 CVE : CVE-2026-06555 製品 : SonicWall SMA 説明 : パストラバーサル 重要度 : 高 パッチの状態: 適用済み フィールド| 値 ---|--- パッチ適用日| 2026-02-25 状態| 適用済み 適用先| 本番環境 検証者| SecOps チーム 参照 NVD CISA KEV...

SonicWall-SMA1000-Zero-Day-IoC-Check

SonicWall SMA1000 ゼロデイ IoC チェック 積極的に悪用されているSonicWall SMA 1000シリーズの脆弱性 CVE-2026-15409 および CVE-2026-15410 に関連する、選択された侵害指標に対する非公式のBashベースのログチェックです。 !CAUTION 独立したコミュニティプロジェクト: このリポジトリは、SonicWallやドイツ連邦情報セキュリティ庁（BSI）とは提携しておらず、承認、保守、または支援を受けていません。 !IMPORTANT...

rapid7-CVE-2026-15409

CVE-2026-15409 이 저장소는 CVE-2026-15409에 대한 개념 증명 익스플로잇을 포함합니다. 이는 localhost:1050에서 예상되는 Erlang 프로토콜을 구현하고 이를 웹소켓을 통해 터널링하여 파일 읽기/쓰기 및 RPC 호출을 통한 임의 코드 실행을 가능하게 함으로써 SonicWall SMA 1000에서 비-root 원격 코드 실행을 수행합니다. 사용법 python3 cve-2026-15409.py --ws-url...

Exploit for Server-Side Request Forgery in Sonicwall Sma8200V

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure...

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...

SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access SMA 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightwe...

Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware

CVE-2026-15409 This repo contains a proof-of-concept exploi...

The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

Exploit for Race Condition in Sonicwall Sma_6200_Firmware

CVE-2024-6387 CVE-2024-6387 POC Currently being edited...

CVE-2026-4112

Improper neutralization of special elements used in an SQL command “SQL Injection” in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator...