← Back

CVE-2026-83549

nvd nist
Published: Sep 1, 2026Modified: Sep 2, 2026CISA KEV

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

Affected (6)

Sonicwall
3 products
Sma8200v
Sma6210 Firmware
Sma7210 Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sonicwall
Sma8200v
Before 12.4.3-03526
Sma8200v
From 12.5.0 to 12.5.0-02952
Running on/withPlatform Versions
Sonicwall
Sma8200v
All versions
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sonicwall
Sma6210 Firmware
Before 12.4.3-03526
Sma6210 Firmware
From 12.5.0 to 12.5.0-02952
Running on/withPlatform Versions
Sonicwall
Sma6210
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sonicwall
Sma7210 Firmware
Before 12.4.3-03526
Sma7210 Firmware
From 12.5.0 to 12.5.0-02952
Running on/withPlatform Versions
Sonicwall
Sma7210
All versions

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

Source: PSIRT@sonicwall.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.