Yüksek CVSS 7.2
CVE-2026-4112: Sma6210 Firmware: SQL enjeksiyonu
Açıklama (NVD)
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
Özet bilgiler
- Ürün
- Sonicwall Sma6210 Firmware
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,64 (yüzdelik 51)
- CWE
- CWE-89
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sonicwall-sma6210-firmware | — | — | 12.4.3-03387 |
| sonicwall-sma6210-firmware | 12.5.0 | — | 12.5.0-02624 |
| sonicwall-sma6200-firmware | — | — | 12.4.3-03387 |
| sonicwall-sma6200-firmware | 12.5.0 | — | 12.5.0-02624 |
| sonicwall-sma7200-firmware | — | — | 12.4.3-03387 |
| sonicwall-sma7200-firmware | 12.5.0 | — | 12.5.0-02624 |
| sonicwall-sma7210-firmware | — | — | 12.4.3-03387 |
| sonicwall-sma7210-firmware | 12.5.0 | — | 12.5.0-02624 |
| sonicwall-sma8200v | — | — | 12.4.3-03387 |
| sonicwall-sma8200v | 12.5.0 | — | 12.5.0-02624 |