Adam Babis

**Name of the Vulnerable Software and Affected Versions** SonicWall SMA1000 Appliances (affected versions not specified) **Description** A pre-authentication Server-Side Request Forgery (SSRF) issue exists in the Work Place interface. This occurs due to an unintended alternate access path, allowing a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations. SSRF is a flaw where an attacker can induce the server-side application to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SonicWall SMA 1000 series (affected versions not specified) sonicwall sma6210 firmware sonicwall sma7210 firmware sonicwall sma8200v **Description** A Server-side request forgery (SSRF) issue exists in the SMA1000 Appliance Work Place interface due to insufficient server-side request validation. This allows a remote unauthenticated attacker to force the appliance to make requests to unintended locations. SSRF is a flaw where an attacker can induce a server-side application to make requests to an unexpected destination. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SonicWall SMA 1000 series (affected versions not specified) **Description** An improper control of code generation issue exists in the Appliance Management Console (AMC). This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary operating system commands. Real-world exploitation has been observed by actor UTA0533, who used a chain of zero-day vulnerabilities to gain unauthorized access, perform lateral movement, and deploy malware. This activity included the use of a binary named `rootrun` for local privilege escalation to root and a malicious script called `KNUCKLEBALL` containing a proxy tool and a web shell to maintain external access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VIPRE Advanced Security for PC (affected versions not specified) **Description** A local attacker can gain higher-level access on systems running VIPRE Advanced Security for PC. To exploit this, an attacker must first be able to run code with limited access on the target system. The issue is due to incorrect permissions set on a folder within the product installer, allowing an attacker to escalate privileges and run code with SYSTEM-level permissions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.