Andrei Lungu

An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.

**Name of the Vulnerable Software and Affected Versions** SonicWall Network Security Manager (NSM) On-Prem Management interface (affected versions not specified) **Description** A missing authorization issue in the management interface allows a user with Admin privileges to escalate their permissions to SuperAdmin. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SonicWall Network Security Manager (NSM) On-Prem (affected versions not specified) **Description** A Zip Slip issue exists in the file upload and archive processing functionality. This allows an attacker to extract files outside the intended destination directory by using a specially crafted archive. Zip Slip is a type of directory traversal attack that occurs when an application extracts files from an archive without properly validating the destination path. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.