What it is about

SonicWall SMA ist ein Secure Access Gateway, mit dem Organisationen Zugang zu geschäftskritischen Unternehmensressourcen bereitstellen können. Ein Angreifer kann mehrere Schwachstellen in SonicWall SMA1000 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder offenzulegen, beliebigen Code auszuführen und Cross-Site-Scripting-Angriffe durchzuführen.

Under what conditions?

The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.

What can happen in the worst case

An attacker could use the vulnerability to

• Sicherheitsvorkehrungen zu umgehen
• Daten zu manipulieren oder offenzulegen
• beliebigen Code auszuführen
• Cross-Site-Scripting-Angriffe durchzuführen

Am I affected?

Affected according to the BSI:

• SonicWall SMA 1000 Models 6210 <12.4.3-03670
• SonicWall SMA 1000 Models 6210 <12.5.0-03082
• SonicWall SMA 1000 Models 7210 <12.4.3-03670
• SonicWall SMA 1000 Models 7210 <12.5.0-03082
• SonicWall SMA 1000 Models 8200v <12.4.3-03670
• SonicWall SMA 1000 Models 8200v <12.5.0-03082

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• SonicWall SMA 1000 Models 6210 12.4.3-03670
• SonicWall SMA 1000 Models 6210 12.5.0-03082
• SonicWall SMA 1000 Models 7210 12.4.3-03670
• SonicWall SMA 1000 Models 7210 12.5.0-03082
• SonicWall SMA 1000 Models 8200v 12.4.3-03670
• SonicWall SMA 1000 Models 8200v 12.5.0-03082

Is the vulnerability already being exploited?

None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.