SonicWall:SMA100 10.2.0.7-34sv and earlier, SonicWall:SMA100 10.2.1.0-17sv and earlier, SonicWall:SMA100 9.0.0.10-28sv and earlier, SonicWall:SMA100 Appliances
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.