Urgent Patch Required: Active Attacks Exploiting SonicWall SMA Vulnerabilities

SonicWall has confirmed that attackers are actively exploiting two vulnerabilities, CVE-2023-44221 and CVE-2024-38475, affecting SMA 100 Series appliances. These flaws can allow authenticated attackers to inject system commands and let unauthorized users hijack sessions by accessing sensitive files. If left unpatched, they could lead to full device compromise. Organizations using SMA should urgently update to the latest firmware and review device logs for any signs of unauthorized access.