2 matches found
CVE-2023-44221: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...
7.2CVSS7.8AI score0.7625EPSS
SaveExploits0References2
PT-2023-9076
Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions prior to 10.2.1.10-62sv Description The issue is related to the improper neutralization of special elements in the SMA100 SSL-VPN management interface, allowing a remote authenticated attacker with administrative...
9.1CVSS7.7AI score0.99957EPSS
SaveExploits1References100
20