writeups.xyz / SonicWall WXA – Authentication Bypass and Remote Code Execution Vulnerability

Submitter : c2a

Date: 7 December 2023

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Hardcoded Credentials
• RCE
• Argument Injection
• Security Code Review

Programs :

• SonicWall

Authors :

• Adam Crosser

Link :
https://www.praetorian.com/blog/sonicwall-wxa-authentication-bypass-and-rce-vulnerability/