- Vendor / Project
- SonicWall
- Product
- SSLVPN SMA100
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Known
- CWEs
- CWE-89
Description
SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.
Required action
Apply updates per vendor instructions.