SSRF in Sonicwall Sma1000
CVE-2024-45317
A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthenticated attacker to cause the SMA1000 server-side application to make requests to an unintended IP…
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.002 (39.7th percentile) — read the EPSS interpretation.
Affected products
- Sonicwall Sma1000 — versions 12.4.3-02676 and earlier versions
Weakness classification (CWE)
References
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0017 (vendor-advisory)