Loading vulnerability…
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Archive-extraction path-traversal vulnerability in the SonicWall SMA1000 Appliance Management Console, rated CVSS 7.2. A specially crafted archive can write files outside the intended extraction directory and lead to remote code execution. Affected firmware includes 12.4.3-03526 and earlier and 12.5.0-02952 and earlier; fixes are available in platform-hotfix 12.4.3-03670 and later or 12.5.0-03082 and later.
A path traversal vulnerability in the SonicWall SMA 1000 Appliance Management Console requiring administrator authentication. Affects models 6210, 7210, and 8200v. Fixed in firmware 12.4.3-03670 and higher, and 12.5.0-03082 and higher. SonicWall reports no evidence of exploitation.
A post-authentication Zip Slip path traversal vulnerability in the SonicWall SMA1000 Appliance Management Console that can lead to code execution. The same platform hotfixes address this flaw; restricting AMC access to trusted administrative networks is also recommended.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.