Post‑authentication OS command injection allows an attacker with administrator privileges on the SonicWall SMA1000 appliance to execute arbitrary operating‑system commands. The flaw results from improper neutralization of special elements in command strings, enabling remote code execution that can compromise device integrity, confidentiality, and availability.

The affected product is SonicWall SMA1000. Although specific firmware versions are not listed, all installations of this appliance are potentially vulnerable until a patch is applied.

The CVSS score of 7.8 indicates high severity. The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed exploitation yet. Because authentication is required, an attacker must first gain administrator credentials before injecting commands. The lack of a known exploit reduces immediate risk, yet the potential impact of full control remains significant.