SonicWall identified a set of three (3) vulnerabilities affecting their SSLVPN Secure Mobile Access (SMA) 1000 series appliances, with one (1) of the flaws being deemed critical. The critical vulnerability, tracked as CVE-2022-22282, has been patched and is described as an unauthenticated access control bypass which could allow an unauthenticated remote attacker to slip past the authentication mechanism to gain access to internal resources, ultimately compromising the device to move laterally across the network. SMA 1000 SSLVPN products are deployed in many corporate networks across the world to streamline and secure remote access to enterprise resources in both local and cloud environments. At the time of this publication there is no evidence that these vulnerabilities are being actively exploited, however the exploit is extremely low-complexity, and does not require the end user to interact with the attack at all. Due to the simple nature of the exploit, CTIX analysts urge any administrators managing SMA 1000 series appliances to update their products immediately. Due to their popularity, being used by more than 500,000 business customers from 215 countries and territories, SMA appliances have been heavily targeted by ransomware threat actors in the past. The other two (2) medium severity vulnerabilitieshave yet to be patched, and administrators should be monitoring SonicWall’s security notices for updates. The vulnerabilities affect SMA 1000 Series models: 6200, 6210, 7200, 7210, 8000v (ESX, KVM, Hyper-V, AWS, Azure). CTIX analysts will continue to monitor this matter for changes and, if warranted, will publish an update in future FLASH summaries.