SonicWall SMA1000 Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface. This vulnerability allows remote, unauthenticated attackers to send encoded URLs that the appliance will use to make requests to unintended locations. The issue is present in SMA1000 versions through 12.4.3-02925.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests to internal or external resources, potentially leading to unauthorized information disclosure or interaction with internal services.

Remediation

Users are advised to upgrade to SonicWall SMA1000 version 12.4.3-02963 or higher. The latest platform-hotfix can be downloaded from mysonicwall.com.