SonicWall.SMA100.mod_cgi.Buffer.Overflow

Description

This indicates an attack attempt to exploit a Buffer Overflow Vulnerability in SonicWall SMA100.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could lead to arbitrary code execution.

Outbreak Alert

A campaign targeting SonicWall SMA 100 series appliances is currently under active exploitation, leveraging both known vulnerabilities and potential zero-days to gain persistent access to enterprise networks. The threat actors deploy a custom Linux-based rootkit for stealth and long-term persistence.

View the full Outbreak Alert Report

Affected Products

SonicWall SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://psirt.global.sonicwall.com/