InfoSecBulletin Cybersecurity for mankind
SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code execution.
The vulnerabilities are listed below:
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
CVE-2025-32819 (CVSS score: 8.8) : A vulnerability in SMA100 lets an authenticated remote attacker with SSL-VPN user access bypass checks and delete any file, which could cause the device to reset to factory default settings.
CVE-2025-32820 (CVSS score: 8.3): “A remote attacker with SSL-VPN user privileges can alter directory permissions on the SMA appliance.”
CVE-2025-32821 (CVSS score: 6.7): “A vulnerability in SMA100 allows a remote authenticated attacker with SSL-VPN admin privileges to inject commands and upload a file to the appliance.”
“An attacker with access to an SMA SSL-VPN user account can chain these vulnerabilities to make a sensitive system directory writable, elevate their privileges to SMA administrator, and write an executable file to a system directory,” Rapid7 said in a report. “This chain results in root-level remote code execution.”
CVE-2025-32819 is seen as a way to bypass a fix for a previously found issue reported by NCC Group in December 2021.
Recent weeks have seen active exploitation of several security flaws in SMA 100 Series devices, including CVE-2021-20035, CVE-2023-44221, and CVE-2024-38475. Users should update to the latest version to ensure optimal protection.
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
