CVE-2024-45317: SonicWall SMA1000

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthenticated attacker to cause the SMA1000 server-side application to make requests to an unintended IP address.

Affected products

• SonicWall SMA1000: up to and including 12.4.3-02676

Published 2024-10-11. Last modified 2026-06-17.