Two SonicWall SMA 1000 ZeroDays Exploited One Could Enable Admin Commands

SonicWall has warned of active exploitation of two zeroday vulnerabilities impacting Secure Mobile Access SMA 1000 series appliances one of which could be exploited to achieve arbitrary command execution The vulnerabilities are listed below CVE202615409 CVSS score 100 A Serverside request forgery SSRF vulnerability that a remote unauthenticated attacker could exploit to