SonicWall SMA100 Path Traversal Vulnerability Allowing Directory Write Access

A path traversal vulnerability has been identified in SonicWall SMA100 series appliances, specifically in versions through 10.2.1.14-75sv. This vulnerability allows remote authenticated attackers with SSLVPN user privileges to inject path traversal sequences, making any directory on the appliance writable. The issue arises from improper validation of file paths, enabling attackers to manipulate directory access and potentially exploit the vulnerability for unauthorized file modifications.

Impact

Exploitation of this vulnerability could lead to unauthorized write access in any directory on the affected SMA appliance, allowing for potential manipulation or replacement of files.

Remediation

Users are advised to upgrade to SonicWall SMA100 series version 10.2.1.15-81sv or higher. After updating, verify that no unauthorized logins have occurred. As an additional security measure, enable multifactor authentication and activate the Web Application Firewall (WAF) on SMA100.