The cybersecurity firm SonicWall has released an advisory warning customers to patch a critical unauthenticated SQL injection vulnerability affecting Global Management System (GMS) version 9.3.1-SP2-Hotfix1 and earlier, as well as On-Prem Analytics version 2.5.0.3-2520 and earlier. GMS and Analytics are widely deployed across many industries, and act as central management hubs allowing network administrators and security personnel to control and configure thousands of SonicWall appliances across their entire network security posture. The flaw, tracked as CVE-2022-22280, is described as an improper neutralization of special elements used in an SQL query, and its exploitation allows attackers to perform unauthenticated SQL Injection. This vulnerability has been given a severity score of 9.4/10 due to the fact that it can be exploited by unauthenticated attackers from within the target network without any interaction from the victim. This, coupled with the very low attack complexity earns this flaw a critical severity rating. At this time there is no proof-of-concept (PoC) exploit, or evidence that this vulnerability has been actively exploited in-the-wild. However, now that the patch has been published, threat actors will be reverse engineering the patch to attack GMS and Analytics instances that are slow to apply the update. There are currently no manual configurations or techniques that mitigate exploitation, so CTIX analysts urge any administrators deploying the affected versions of GMS and Analytics to update to the latest version immediately to prevent being compromised. As a best practice, SQL injection attacks are significantly reduced via deploying a Web Application Firewall (WAF), and analysts recommend incorporating this to add defense-in-depth to their network appliances.