SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has issued hotfixes to address four vulnerabilities in its SMA1000 appliances, which provide remote access to company networks and applications. The most critical flaw is a pre-authentication server-side request forgery issue that could allow an unauthenticated attacker to send requests through the appliance and access internal functions. SonicWall has assigned a CVSS score of 10.0 to this vulnerability, indicating its high severity. The company reports that it has no evidence of any of the four vulnerabilities being exploited at this time.