In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
Confirm exposure before applying a vendor-supported change.
Apply updates per vendor instructions.
Due date: 2022.04.18Confirm that SonicWall SMA100 and an affected version are present.
Combine exploitation signals with asset exposure and business criticality.
Follow the vendor advisory or supported update path and preserve rollback options.
Recheck the version, service health, access paths, and relevant logs.
