Description
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
Problem types
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Product status
10.2.1.14-75sv and earlier versions
References
psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
