Dark Reading reports that SonicWall SMA 1000 appliances are being hit by zero-day vulnerabilities that permit unauthenticated remote code execution. The exact technical details are not disclosed in the source, but the lack of authentication required makes these flaws particularly dangerous for organisations relying on these devices for secure remote access.
The exploitation activity is not isolated. It comes after two other zero-day vulnerabilities in SonicWall edge devices were attacked earlier this summer. This suggests a sustained campaign targeting the vendor's perimeter products, likely to gain initial footholds in corporate networks.
Organisations using SMA 1000 series should treat this as a high-priority risk. They should watch for vendor advisories and apply any available patches or mitigations immediately. Until then, limiting exposure and monitoring for suspicious traffic on these appliances is advisable.