- Vendor / Project
- SonicWall
- Product
- SMA100
- Date added
- Mar 28, 2022
- Due date
- Apr 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-22
Description
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
Required action
Apply updates per vendor instructions.