Description
SonicWall SSL-VPN 受到 CVE-2024-38475 - Apache HTTP Pre-Authentication Arbitrary File Read 影响， 导致可以任意文件读取
SonicWall SSL-VPN 任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://pentest-tools.com/vulnerabilities-exploits/sonicwall-arbitrary-file-read_8
https://labs.watchtowr.com/sonicboom-from-stolen-tokens-to-remote-shells-sonicwall-sma100-cve-2023-44221-cve-2024-38475/
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/03-%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/SonicWall%20SSL-VPN/SonicWall%20SSL-VPN%20%E6%9C%AA%E6%8E%88%E6%9D%83RCE%E6%BC%8F%E6%B4%9E/
https://peiqi.wgpsec.org/wiki/iot/SonicWall/SonicWall%20SSL-VPN%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.html
https://www.sonicwall.com/support/notices/product-notice-sma100-post-authentication-arbitrary-file-upload-vulnerability/kA1VN0000000RDD0A2
https://cloud.tencent.com/developer/article/2549728
https://github.com/emadshanab/goby_poc5/blob/main/SonicWall%20SSL-VPN%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.json
https://www.anquanke.com/post/id/198663
https://zhuanlan.zhihu.com/p/107859289
https://nosec.org/m/share/4662.html