A permissive cross‑domain policy in the SonicOS management interface can be exploited by an unauthenticated attacker to perform unauthorized operations. The defect allows the attacker to bypass normal access controls and interact with resources that should be protected by the management interface.

The vulnerability affects the SonicWall SonicOS software for its web‑based management interface. No specific product version information is provided in the advisory, so all installations of SonicOS that expose the management interface should be evaluated.

The CVSS score of 8.8 indicates a high severity level. While no EPSS figure is available, the lack of a KEV listing suggests the vulnerability is not yet widely exploited. The attack vector is remote, unauthenticated, and hinges on the presence of a permissive cross‑domain policy, which is likely to be discoverable by sending crafted HTTP requests to the management interface.