https://pwn.watch/i/sonicwall-sma100-appliances-cve-2023-44221 SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user. Added to CISA KEV on 2025-05-01. en Thu, 01 May 2025 00:00:00 GMT https://pwn.watch/i/sonicwall-sma100-appliances-cve-2023-44221 https://pwn.watch/i/sonicwall-sma100-appliances-cve-2023-44221#2025-05-01-93ab5edc Thu, 01 May 2025 00:00:00 GMT high <p>SonicWall SMA100 Appliances: SMA100 Appliances OS Command Injection Vulnerability: CISA added CVE-2023-44221 to the KEV catalog (due 2025-05-22).</p>