Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
| Software | From | Fixed in |
|---|---|---|
| sonicwall / sma8200v | - | 12.4.3-02854 |
| sonicwall / sma6200_firmware | - | 12.4.3-02854 |
| sonicwall / sma6210_firmware | - | 12.4.3-02854 |
| sonicwall / sma7200_firmware | - | 12.4.3-02854 |
| sonicwall / sma7210_firmware | - | 12.4.3-02854 |
| sonicwall / sra_ex6000_firmware | - | 12.4.3-02804.x |
| sonicwall / sra_ex7000_firmware | - | 12.4.3-02804.x |
| sonicwall / sra_ex9000_firmware | - | 12.4.3-02804.x |