https://reddit.com/r/netsec/comments/1kclo6p/sonicboom_from_stolen_tokens_to_remote_shells/: SonicBoom, From Stolen Tokens to Remote Shells - SonicWall SMA100 (CVE-2023-44221, CVE-2024-38475) - watchTowr Labs
Published May 1, 2025
·Updated
Affected Software
1 affected component
SonicWall SMA100
Frequently Asked Questions
1
What is the severity of CVE-2023-44221?
CVE-2023-44221 is rated as a critical vulnerability due to its potential for unauthorized access and system compromise.
2
What is the impact of CVE-2024-38475?
CVE-2024-38475 allows attackers to execute remote shell commands, leading to a full system takeover.
3
How do I fix CVE-2023-44221?
To mitigate CVE-2023-44221, ensure you update to the latest firmware provided by SonicWall for the SMA100 device.
4
How can I protect against CVE-2024-38475 exploitation?
To protect against CVE-2024-38475, implement strict access controls and regularly monitor your network for suspicious activity.
5
Are there any recommended configurations for SonicWall SMA100 to mitigate these vulnerabilities?
It is recommended to apply best security practices, including disabling unused services and applying necessary patches immediately to protect against both CVE-2023-44221 and CVE-2024-38475.