SonicWall SMA1000 SSRF Vulnerability: Third Max Flaw

SonicWall SMA1000 SSRF vulnerability is the third max-severity flaw in three months. Attempts are reported; patch to 12.4.3-03670 or 12.5.0-03082.

A third maximum-severity flaw in three months has been fixed in SonicWall’s SMA1000 remote-access appliances, and this SonicWall SMA1000 SSRF vulnerability may already be under attack. SonicWall’s October advisory describes an unauthenticated server-side request forgery rated CVSS 10.0. A security firm says its honeypots saw exploitation attempts, while SonicWall says it has no evidence of…

Read More