CVE-2023-44221

Published Dec 5, 2023

Last updated 5 months ago

Exploit known CVSS high 7.2

SMA100

Sonicwall

Overview

Description: Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
Source: PSIRT@sonicwall.com
NVD status: Analyzed
Products: sma_200_firmware, sma_210_firmware, sma_400_firmware, sma_410_firmware, sma_500v_firmware

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.2
Impact score: 5.9
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: SonicWall SMA100 Appliances OS Command Injection Vulnerability
Exploit added on: May 1, 2025
Exploit action due: May 22, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

PSIRT@sonicwall.com: CWE-78
nvd@nist.gov: CWE-78

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4674E718-3642-4042-82DE-49B845CF2DC6",
            "versionEndIncluding": "10.2.1.9-57sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "0B190266-AD6F-401B-9B2E-061CDD539236",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "5990A44B-DD34-4B32-B233-9062902EBE9A",
            "versionEndIncluding": "10.2.1.9-57sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "51587338-4A5F-41FC-9497-743F061947C2",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C82E099E-AAE1-4BD3-B0C0-38326201586C",
            "versionEndIncluding": "10.2.1.9-57sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "9D728332-10C9-4508-B720-569D44E99543",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "E422E9C1-597B-468F-A634-23C54C1F7C74",
            "versionEndIncluding": "10.2.1.9-57sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B70F00FF-A14D-40F3-9381-817542DE6A7D",
            "versionEndIncluding": "10.2.1.9-57sv",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A6AD8A33-7CE4-4C66-9E23-F0C9C9638770",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References