CVE-2026-83549
2026-09-01
21h28 +00:00
21h28 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
CVE 설명
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
CVE 정보
관련 약점
| 약점 이름 | 출처 | |
|---|---|---|
| Improper Neutralization of Special Elements used in an OS Command The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component. |
CISA KEV (알려진 악용 취약점)
취약점 이름 : SonicWall SMA1000 Appliances OS Command Injection Vulnerability
필요한 조치 : Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
랜섬웨어 캠페인에 사용된 것으로 알려진 취약점 : Unknown
추가됨 : 2026-09-02 00h00 +00:00
조치 기한 : 2026-09-05 00h00 +00:00
중요 정보
이 CVE는 CISA KEV에 따라 활성화된 위협을 제기하는 것으로 식별되었습니다. 잠재적 사이버 공격으로부터 시스템을 보호하기 위해 이 CVE의 업데이트 및 수정을 우선 처리하세요.
