CVE-2023-44221 | BDVDB-2026-218533 Detail

Description#

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-12-05Record published in the CVE List.
2. Version 22025-10-21Most recent update recorded in the CVE List.