SONICWALL URGES ADMINS TO PATCH CRITICAL RCE FLAW IN SMA 100 DEVICES

Summary from the TLDR InfoSec newsletter

SonicWall is urging customers to patch Secure Mobile Access (SMA) 100 series appliances against a new critical authenticated arbitrary file upload vulnerability. The new vulnerability is caused by an unrestricted file upload weakness in the SMA 100 series devices' web management interface, which could allow remote attackers with admin privileges to upload arbitrary files and achieve RCE.