SQL Injection Vulnerability SonicWall SMA Appliances

Arctic Wolf summarizes SonicWall's disclosure of a zero-day SQL injection (CVE-2021-20016) affecting SMA 100 Series appliances, which enables unauthenticated attackers to extract user credentials and potentially access appliance web interfaces to pivot into networks. SonicWall released firmware 10.2.0.5-29sv to patch the issue; Arctic Wolf recommends updating firmware, resetting passwords, and enabling multifactor authentication, noting researchers have observed exploitation in the wild.