cyber.hendryadrian.com
Vulnerability & Exploit · helpnetsecurity.com

SonicWall Patches Four Vulnerabilities in SMA 1000 Appliances

· Original article ↗

Summary

SonicWall patched four vulnerabilities in SMA 1000 appliances, including a pre-authentication SSRF flaw. Affected physical and virtual models should be upgraded to firmware 12.4.3-03670 or 12.5.0-03082 or later.

Key points

  • CVE-2026-102255 is a pre-authentication SSRF flaw that could let remote attackers reach internal endpoints and perform unauthorized operations.
  • CVE-2026-102256 is a post-authentication OS command injection vulnerability.
  • CVE-2026-102257 and CVE-2026-102258 are administrator-authenticated path traversal and cross-site scripting flaws in the Appliance Management Console.
  • The vulnerabilities affect physical and virtual SMA 1000 models 6210, 7210, and 8200v.
  • SonicWall fixed all four issues; customers should install firmware 12.4.3-03670 or later, or 12.5.0-03082 or later.
  • SonicWall said there is no current evidence that these vulnerabilities are being exploited in the wild.

Article Details

Vulnerability Types
  • Server-side request forgery (SSRF)
  • OS command injection
  • Path traversal
  • Cross-site scripting (XSS)
Affected Versions
  • SMA 1000 physical and virtual models 6210, 7210, and 8200v
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-102255SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that could let remote attackers trigger internal requests and unauthorized actions.CVE-2026-102256#SonicWallCVE-2026-102257#SonicWallCVE-2026-102258#SonicWallCVE-2026-15409In 2026, two pre-authentication server-side request forgery flaws (CVE-2026-15409, CVE-2026-83548) in SonicWall’s SMA 1000 appliances have been leveraged as zero-days.CVE-2026-83548In 2026, two pre-authentication server-side request forgery flaws (CVE-2026-15409, CVE-2026-83548) in SonicWall’s SMA 1000 appliances have been leveraged as zero-days.

People

Benoit SevensReported CVE-2026-102255 and CVE-2026-102256.Brian MarianiReported CVE-2026-102257 and CVE-2026-102258.

Vendors

SonicWallSonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that could let remote attackers trigger internal requests and unauthorized actions.

Products

Appliance Management ConsoleCVE-2026-102257 and CVE-2026-102258 affect the Appliance Management Console and require admin access.Appliance WorkPlaceCVE-2026-102255 is a pre-authentication SSRF vulnerability in the SMA 1000 Appliance Work Place interface, due to an unintended alternate access path.SMA 100 SeriesSonicWall’s firewall products and the (discontinued and unsupported) SMA 100 Series product line are not affected.SonicWall SMA1000SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that could let remote attackers trigger internal requests and unauthorized actions.

Industries

GovernmentThe SonicWall SMA 1000 series is a line of SSL VPN gateways used by medium to large enterprises, managed security service providers, and government agencies.Managed Security Service ProvidersThe SonicWall SMA 1000 series is a line of SSL VPN gateways used by medium to large enterprises, managed security service providers, and government agencies.

Related Articles