Known Exploited Vulnerabilities May 01, 2025 · CISA KEV Catalog

CVE-2023-44221: Sonic Wall SMA100 Appliances OS Command Injection Vulnerability

SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2023-44221SonicWall

Related

CVE-2026-19868: Sonic Wall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability Known Exploited Vulnerabilities · Nov 06, 2026

CVE-2026-83549: Sonic Wall SMA1000 Appliances OS Command Injection Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026

CVE-2026-83548: Sonic Wall SMA1000 Appliances Server-Side Request Forgery Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026