A critical arbitrary file upload vulnerability in SonicWall SMA 100 series appliances allows authenticated administrators to achieve remote code execution.

This is an Unrestricted Upload of File with Dangerous Type (CWE-434) vulnerability. The web management interface lacks sufficient validation, allowing an attacker with administrative privileges to upload arbitrary files to the appliance.

With a CVSS score of 9.1, this vulnerability poses a severe risk, as an attacker with administrative access can compromise the entire appliance. This could lead to a full network compromise, as SMA appliances often provide VPN and remote access services, potentially exposing the entire internal network to unauthorized control.

Immediate Action: Update the SonicWall SMA 100 Series firmware to the latest available version provided by the vendor.

Proactive Monitoring: Monitor administrative login logs and file system integrity for the unexpected creation of executable files within the management directory.

Compensating Controls: Restrict access to the management interface to trusted management subnets or VPNs only, and enforce strong multi-factor authentication (MFA) for all administrative accounts.

Public Exploit Available: No (exploit_available: false)

SonicWall administrators should treat this vulnerability as critical. Apply the vendor-provided firmware update immediately and ensure that administrative access to the SMA 100 series is strictly governed by the principle of least privilege.