FKIE_CVE-2026-15410

Vulnerability from fkie_nvd - Published: 2026-07-14 20:16 - Updated: 2026-07-16 05:16
Severity
7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
References
PSIRT@sonicwall.comhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15410US Government Resource
Impacted products
Vendor Product Version
sonicwall sma6210_firmware 12.4.3-03245
sonicwall sma6210_firmware 12.4.3-03387
sonicwall sma6210_firmware 12.4.3-03434
sonicwall sma6210_firmware 12.5.0-02283
sonicwall sma6210_firmware 12.5.0-02624
sonicwall sma6210_firmware 12.5.0-02800
sonicwall sma6210 -
sonicwall sma7210_firmware 12.4.3-03245
sonicwall sma7210_firmware 12.4.3-03387
sonicwall sma7210_firmware 12.4.3-03434
sonicwall sma7210_firmware 12.5.0-02283
sonicwall sma7210_firmware 12.5.0-02624
sonicwall sma7210_firmware 12.5.0-02800
sonicwall sma7210 -
sonicwall sma8200v 12.4.3-03245
sonicwall sma8200v 12.4.3-03387
sonicwall sma8200v 12.4.3-03434
sonicwall sma8200v 12.5.0-02283
sonicwall sma8200v 12.5.0-02624
sonicwall sma8200v 12.5.0-02800
sonicwall sma8200v -
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Linux"
          ],
          "product": "SMA1000",
          "vendor": "SonicWall",
          "versions": [
            {
              "lessThanOrEqual": "12.4.3-03434",
              "status": "affected",
              "version": "12.4.3-03245",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "12.5.0-02800",
              "status": "affected",
              "version": "12.5.0-02283",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "PSIRT@sonicwall.com"
    }
  ],
  "cisaActionDue": "2026-07-17",
  "cisaExploitAdd": "2026-07-14",
  "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "cisaVulnerabilityName": "SonicWall SMA1000 Appliances Code Injection Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03245:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F861049-5B88-4E18-A0E7-D1E2BC7A4342",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03387:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4A6CA48-E2D9-4F18-8FC8-B1EE7F51789C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03434:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBCE7761-8416-4942-B0BD-426EFC73B57C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02283:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE23BD37-4112-407F-9E34-04CB5A4DA996",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02624:*:*:*:*:*:*:*",
              "matchCriteriaId": "95E3313E-0647-40ED-9848-5AC01188A84F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02800:*:*:*:*:*:*:*",
              "matchCriteriaId": "75F6B9CE-73E4-42BE-9CE1-FD79255CDD0B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03245:*:*:*:*:*:*:*",
              "matchCriteriaId": "55CD7766-9F2D-450D-A878-AA1522E8FF68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03387:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAF12D10-FA8F-471E-B008-68E0E29089C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03434:*:*:*:*:*:*:*",
              "matchCriteriaId": "79920402-165D-4D81-BFD2-9F679A48671A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02283:*:*:*:*:*:*:*",
              "matchCriteriaId": "6842E4D7-BEDA-41FB-AEC3-CEB3692374C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02624:*:*:*:*:*:*:*",
              "matchCriteriaId": "6AF4557F-ABAF-4795-915A-695383F64EEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02800:*:*:*:*:*:*:*",
              "matchCriteriaId": "9459507A-A2C8-400D-8669-E8ADBDE61DE0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.4.3-03245:*:*:*:*:*:*:*",
              "matchCriteriaId": "571C9CA1-F660-4479-9E91-B3B1714A2090",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.4.3-03387:*:*:*:*:*:*:*",
              "matchCriteriaId": "58706C99-B77F-4AE5-BD45-EBA65DEE2485",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.4.3-03434:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E698DFA-1684-43E3-9964-0E207A7A2CC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.5.0-02283:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2F44543-2404-4CDF-9D2F-1B851660F5D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.5.0-02624:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E14F40F-4AA1-42B4-998E-AC965FBBE519",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.5.0-02800:*:*:*:*:*:*:*",
              "matchCriteriaId": "43197E99-0500-4971-8A66-4E70F8138289",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "653B5F4D-7417-4A85-B385-46157A1540A6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Post-authentication improper control of generation of code (\u0027Code Injection\u0027) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands."
    }
  ],
  "id": "CVE-2026-15410",
  "lastModified": "2026-07-16T05:16:18.470",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-15410",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-14T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-14T20:16:56.903",
  "references": [
    {
      "source": "PSIRT@sonicwall.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15410"
    }
  ],
  "sourceIdentifier": "PSIRT@sonicwall.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "PSIRT@sonicwall.com",
      "type": "Secondary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.