This vulnerability involves improper control of code generation (CWE-94) in the SonicWall Email Security appliance. An attacker who is authenticated and has access to the restricted CLI interface can exploit the flaw by injecting arbitrary OS commands through the netmask parameter. These commands execute with root privileges, potentially allowing complete control over the affected system. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation information is currently provided, and no known exploits are reported in the wild.

Successful exploitation allows an authenticated attacker to execute arbitrary OS commands as root on the SonicWall Email Security appliance. This can lead to full system compromise, including unauthorized access to sensitive data, system disruption, and potential further network penetration.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SonicWall Email Security restricted CLI to trusted administrators only and monitor for suspicious activity related to command injection attempts.