This vulnerability involves improper neutralization of special elements in SQL commands (CWE-89) within SonicWall SMA1000 appliances. An attacker with read-only admin access can exploit this SQL injection flaw to escalate privileges to primary administrator, potentially gaining full control over the affected device. The issue affects multiple versions up to and including 12.5.0-02283 (platform-hotfix). No official remediation or patch has been documented yet.

Successful exploitation allows privilege escalation from read-only administrator to primary administrator on SonicWall SMA1000 appliances. This could lead to full administrative control over the device, potentially compromising its security and management functions. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit read-only administrator access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.