Weakness
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Affected products
- sonicwall sma6210_firmware
- sonicwall sma6210
- sonicwall sma6200_firmware
- sonicwall sma6200
- sonicwall sma7200_firmware
- sonicwall sma7200
- sonicwall sma7210_firmware
- sonicwall sma7210
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.