SonicWall SMA1000 Appliance Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the SonicWall SMA1000 appliance management console. This vulnerability arises from insufficient authorization, allowing unauthorized users to gain elevated privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation within the appliance management console.

Remediation

Users are advised to upgrade to SonicWall SMA1000 version 12.4.3-03245 (platform-hotfix) or 12.5.0-02283 (platform-hotfix). The latest platform-hotfix can be downloaded from mysonicwall.com. As a workaround, restrict access to the Appliance Management Console (AMC) by allowing SSH access only via VPN or specific admin IPs, and disable the SSL VPN management interface and SSH access from the public internet.