The CVE involves an unauthenticated server‑side request forgery (SSRF) vulnerability in the SonicWall SMA1000 Work Place interface. Because the device provides an alternate access path that bypasses authentication, a remote actor can send internal HTTP requests from the appliance, potentially reading or modifying protected internal resources. This flaw is categorized as CWE‑441 (Unauthorized Access to External Resource) and CWE‑918 (Server‑Side Request Forgery). If exploited, the attacker could gain unauthorized control over functions within the device and use it to pivot to other assets inside the network, leading to significant confidentiality and integrity breaches.

All SonicWall SMA1000 appliances are potentially affected. The vulnerability description does not specify working version ranges, implying that any released SMA1000 model could be vulnerable unless a patch is applied. Administrators should verify whether their particular firmware version contains the fix referenced in the vendor advisory linked in the references.

The CVSS score of 10 indicates maximum severity. The EPSS score of 9% suggests that attackers are actively exploiting similar SSRF weaknesses, and the presence in the CISA KEV catalog confirms current exploitation. The lack of authentication combined with the SSRF capability and internal network reach suggest a very high likelihood that an adversary can use the device as a foothold or to reach critical internal servers.