CISA Warns 2 SonicWall Vulnerabilities Under Active Exploitation

CISA has added two SonicWall SMA vulnerabilities (CVE-2023-44221: pre-auth arbitrary file read, CVSS 7.2; and CVE-2024-38475: post-auth OS command injection, CVSS 9.8) to the Known Exploited Vulnerabilities catalog. The flaws affect SMA 200/210/400/410/500v devices, have patches available, and were the subject of technical details published by WatchTowr; SonicWall and CISA warn of potential in-the-wild exploitation and urge immediate review and patching of affected devices.