Vulnerability Notification – SonicWall SMA 1000 Zero-Day Chain Actively Exploited

(TLP:CLEAR) ACTION MAY BE REQUIRED for utilities using SonicWall SMA 1000 series appliances (models 6210, 7210, and 8200v) for remote access. Utilities that outsource technology support may need to consult their service providers for assistance with remediation actions.

Two zero-day vulnerabilities affecting SonicWall Secure Mobile Access (SMA) 1000 series appliances are being actively exploited in the wild and can be chained together to achieve full, unauthenticated remote code execution.