Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sonicwall sma_200_firmware |
||
sonicwall sma_210_firmware |
||
sonicwall sma_400_firmware |
||
sonicwall sma_410_firmware |
||
sonicwall sma_500v_firmware |
Vulmon