Exploit / PoCcriticalExploited in the wild

SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models

The Hacker Newsby @TheHackersNewsMay 5, 2025 · 15:51 UTC (May 5, 2025)2 min read1 · 1 read

Read at thehackernews.com

Analyze CVE-2023-44221 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-44221 CVE-2024-38475 CVE-2021-20035

Tags: cve-2023-44221 cve-2024-38475 cve-2021-20035 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20035	Authenticated OS Command Injection in SonicWall SMA100 Appliances	6.5	4%	KEV	Sep 27, 2021 KEV Apr 16, 2025
CVE-2023-44221	OS Command Injection in SonicWall SMA100 SSL-VPN Management Interface	7.2	76%	KEV	Dec 5, 2023 KEV May 1, 2025
CVE-2024-38475	Improper Output Escaping in Apache HTTP Server mod_rewrite Enables File Disclosure/Code Execution	9.1	100%	KEV	Jul 1, 2024 KEV May 1, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 01, 2025 Vulnerability / VPN Security SonicWall has revealed that two now-patched security flaws impacting its SMA100 Secure Mobile Access (SMA) appliances have been exploited in the wild. CVE-2023-44221 (CVSS score: 7.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.