description: Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.
problem types: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
affected:
{
product: SMA100
vendor: SonicWall
versions:
status: affected, version: 10.2.1.4-31sv and earlier
status: affected, version: 10.2.0.9-41sv and earlier
}