SonicWall urges customers to immediately address a post-authentication flaw that affects on-premises versions of the Network Security Manager (NSM) The flaw could be exploited by an attacker to perform OS command injection using a crafted HTTP request. The flaw affects NSM version 2.2.0-R10-H1 and earlier, the security vendor addressed it with the release of NSM 2.1.1-R6. The vulnerability rated with an 8.8 severity score could be simply exploited without user interaction.”]
Source: https://securityaffairs.co/wordpress/118372/security/sonicwall-nsm-on-prem-bug.html