CVE-2023-44221

No fix known ExploitedEPSS 76%CVSS 7.2

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.

Published 2023-12-05 · In CISA KEV since 2025-05-01 · CVE record · OSV

Products: SonicWall SMA100