This vulnerability in SonicWall SonicOS is classified as CWE-644, indicating improper neutralization of HTTP headers for scripting syntax. It enables remote attackers to manipulate the Host header in HTTP requests, which could lead to redirecting users of the firewall management interface to attacker-controlled web domains. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact includes limited confidentiality and integrity loss but no availability impact. No official remediation or patch information is currently available, and no known exploits are reported in the wild.

An attacker can remotely manipulate HTTP Host headers to redirect firewall management users to arbitrary domains, potentially facilitating phishing or other social engineering attacks. The confidentiality and integrity impacts are limited, and there is no impact on availability. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when accessing the firewall management interface and monitor for updates from SonicWall.