Another day, another SonicWall panic

SonicWall SMA 1000 boxes have a chained CVSS 10.0 flaw letting strangers run arbitrary commands. Naturally, immediate patching is urged, because that always gets done promptly.

Source: Cybersecurity Dive

The Full Story

Severity: Critical Mood: Frustrating

Here we go again, as SonicWall SMA 1000 appliances proudly gift unauthenticated attackers full arbitrary command execution via chained SSRF and OS injection bugs. CISA has predictably shoved this charming CVSS 10.0 disaster straight into its catalog of actively exploited misery. To save our weary skins from catastrophe, SonicWall cheerfully begs us for immediate patching, as if IT teams haven't got enough fires to put out this Tuesday. It is truly the gift that keeps on taking.

#SonicWall #JustPatchIt

Open article →