This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] SonicWall fixes 2 actively exploited vulnerabilities
SonicWall fixes two vulnerabilities in SMA1000 via hotfixes 12.4.3-03526 and 12.5.0-02952. The affected models are SMA1000 6210, 7210 and 8200v; SSL-VPN on SonicWall firewalls and the SMA 100 series are not affected [1]. SonicWall is aware of active exploitation, and CISA has already added the vulnerabilities to its list of actively exploited vulnerabilities [1][2].
An unauthenticated remote attacker can gain unauthorized access to sensitive functions and perform unauthorized operations due to an SSRF vulnerability [1].
The vulnerability is present in product:
- SMA1000 Models - 6210, 7210, 8200v; <12.4.3-03526; <12.5.0-02952
CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2026-83548 at cve.org, NVD
- CWE-918: Server-Side Request Forgery (SSRF) at cwe.mitre.org
- CWE-441: Unintended Proxy or Intermediary ('Confused Deputy') at cwe.mitre.org
The vulnerability was publicly disclosed 1. 9. 2026.
An authenticated remote attacker with administrator privileges can execute arbitrary operating system commands and remotely execute code [1].
The vulnerability is present in product:
- SMA1000 Models - 6210, 7210, 8200v; <12.4.3-03526; <12.5.0-02952
CVSS: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2026-83549 at cve.org, NVD
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 1. 9. 2026.
Links
By CESNET, z.s.p.o. Michaela Jarošová on 2. 9. 2026.