
Attackers Exploit SonicWall SMA 1000 SSRF Flaw Days After Disclosure
Unauthenticated attackers are actively exploiting a critical server-side request forgery flaw in SonicWall appliances, shortly after public disclosure.
Everything Threat Times has reported about SonicWall: 5 stories, newest first. Part of our Vulnerabilities coverage.

Unauthenticated attackers are actively exploiting a critical server-side request forgery flaw in SonicWall appliances, shortly after public disclosure.

Threat actors are currently targeting a maximum-severity server-side request forgery vulnerability in SonicWall SMA 1000 network security appliances.

SonicWall has issued hotfixes for four security flaws in its SMA1000 remote access appliances, including a pre-authentication SSRF vulnerability rated 10.0.

SonicWall and Splunk have released patches for critical and high-severity flaws that allow authentication bypasses and arbitrary code execution.

Attackers are actively exploiting a maximum-severity flaw in SonicWall SMA1000 appliances that was patched just three days ago.