CVE-2023-44221 (published 2023-12-05T20:10:35.186Z)
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
Affected products: Vendor: SonicWall
Product: SMA100
Versions: 10.2.1.9-57sv and earlier versions