Skip to main content
Apexward Pulse
3 reportsPriority High

SonicWall and Digiever vulnerability disclosures

New vulnerabilities in SonicWall and Digiever devices could allow attackers to gain unauthorised access, posing risks to UK organisations using these systems.

First report Latest

What is going on

  • SonicWall SMA1000 has a missing authorisation vulnerability that could allow privilege escalation on the appliance management console, with reports of exploitation in the wild.
  • Digiever DS-2105 Pro contains a missing authorisation vulnerability that could enable command injection through time_tzsetup, also reported as exploited.
  • CISA has added two new vulnerabilities to its known-exploited catalogue, indicating active exploitation of these issues.
  • What to watch: Further details on the extent of exploitation and mitigation efforts by affected vendors.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed