Description (CNA)
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SonicWall / SMA1000 | affected 12.4.3-03245 through 12.4.3-03434; affected 12.5.0-02283 through 12.5.0-02800 |
CWE
CWE-94
References
ADP enrichment
No English description supplied.