The vulnerability is an OS Command Injection that requires authentication as an administrator. Through the SMA1000 Appliance Management Console, a malicious user can input unfiltered data that the console incorporates into an operating system command. This flaw is based on improper neutralization of special elements and can allow the attacker to execute arbitrary shell commands on the device, leading to full system compromise.

The affected product is the SonicWall SMA1000 Appliance Management Console. No specific firmware or software version is listed in the data provided, so all releases of the SMA1000 that include the console may be impacted.

The CVSS score of 7.8 indicates a high severity for this remote code execution flaw. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, but it requires the attacker to have authenticated administrator privileges to the console. An attacker who can gain such access may run arbitrary commands, potentially taking full control of the appliance.