Description (CNA)
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SonicWall / Network Security Manager (NSM) | affected 4.3.1 and earlier versions |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.