Several vulnerabilities in the Sonicwall SECURE ACCESS (SMA) management interface could allow the execution of the remote code

Multiple VUlnerabilities have been discovered in the management interface of Sonicwall Secure Mobile Access (SMA), which could allow the execution of remote code. Sonicwall Secure Mobile Access (SMA) is a unified secure access gateway used by organizations to provide employees with access to applications from anywhere. Successful exploitation of these vulnerabilities When chained, could allow the execution of the remote code, potentially leading to a session diversion and a complete compromise of the system.

Watchtowr CVE-2024-38475 and CVE-2023-44221 reports are already used in attacks in the real world, making awareness and action immediately essential for affected organizations. CISA has also added both vulnerabilities to the catalog of known vulnerabilities (KEV).