A Zip Slip vulnerability in the SMA1000 Appliance Management Console allows an attacker to create files outside the intended directory when uploading a specially crafted archive. This weakness, identified as CWE-22, can lead to remote code execution by placing malicious binaries or scripts in protected locations, thus compromising the integrity and confidentiality of the system.

SonicWall SMA1000 appliances that expose the AMC interface are affected. No specific firmware versions are listed, so all devices with the AMC interface are potentially vulnerable.

The flaw enables the attacker to execute arbitrary code on the appliance by manipulating archive extraction, representing a high‑risk threat. The EPSS score is not available and the vulnerability is not yet listed in CISA KEV, suggesting no confirmed exploitation to date. An attacker would need to gain access to the AMC interface, either authenticated or through misconfiguration, to upload a malicious archive and exploit the Zip Slip condition.