SonicWall SMA100
26 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-40603 | 10.2.2.2-92sv and earlier versions | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administr | MEDIUM 4.5 | 0.5 % | ||
| CVE-2025-32821 | 10.2.1.14-75sv and earlier versions | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell com | HIGH 7.2 | 22 % | ||
| CVE-2025-32820 | 10.2.1.14-75sv and earlier versions | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make an | HIGH 8.8 | 2.9 % | ||
| CVE-2025-32819 | 10.2.1.14-75sv and earlier versions | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete | HIGH 8.8 | 6.5 % | ||
| CVE-2024-53703 | 10.2.1.13-72sv and earlier versions | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web serv | HIGH 8.1 | 13 % | ||
| CVE-2024-53702 | 10.2.1.13-72sv and earlier versions | Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-45319 | 10.2.1.13-72sv and earlier versions | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can cir | MEDIUM 6.3 | 0.2 % | ||
| CVE-2024-45318 | 10.2.1.13-72sv and earlier versions | A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and pot | HIGH 8.1 | 1.0 % | ||
| CVE-2024-40763 | 10.2.1.13-72sv and earlier versions | Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers | HIGH 7.5 | 0.9 % | ||
| CVE-2024-22395 | 10.2.1.10-62sv and earlier versions | Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could po | MEDIUM 6.3 | 0.4 % | ||
| CVE-2023-5970 | 10.2.1.9-57sv and earlier versions | Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external d | HIGH 8.8 | 0.9 % | ||
| CVE-2023-44221 | 10.2.1.9-57sv and earlier versions | Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administr | HIGH 7.2 | 76 % | KEV | |
| CVE-2022-2915 | 10.2.1.5-34sv and earlier | A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Servi | HIGH 8.8 | 6.9 % | ||
| CVE-2022-1703 | 10.2.1.4-31sv and earlier ; 10.2.0.9-41sv and earlier | Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attack | HIGH 8.8 | 13 % | ||
| CVE-2021-20035 | 9.0.0.10-28sv and earlier ; 10.2.0.7-34sv and earlier ; 10.2.1.0-17sv and earlier | Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary co | MEDIUM 6.5 | 4.4 % | KEV | |
| CVE-2021-20034 | 9.0.0.10-28sv and earlier ; 10.2.0.7-34sv and earlier ; 10.2.1.0-17sv and earlier | An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete a | CRITICAL 9.1 | 82 % | ||
| CVE-2021-20018 | 10.2.0.5 and earlier | A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. T | MEDIUM 4.9 | 0.7 % | ||
| CVE-2021-20017 | 10.2.0.5 and earlier | A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobod | HIGH 8.8 | 1.9 % | ||
| CVE-2020-5146 | 10.2.0.2-20sv and earlier | A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST paramet | HIGH 7.2 | 1.9 % | ||
| CVE-2020-5132 | SMA100 10.2.0.2-20sv | SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision | MEDIUM 5.3 | 1.0 % | ||
| CVE-2019-7486 | 9.0.0.4 and earlier | Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impac | HIGH 8.8 | 1.6 % | ||
| CVE-2019-7485 | 9.0.0.3 and earlier | Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability imp | HIGH 8.8 | 1.5 % | ||
| CVE-2019-7484 | 9.0.0.3 and earlier | Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. T | MEDIUM 6.5 | 0.8 % | ||
| CVE-2019-7483 | 9.0.0.3 and earlier | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the prese | HIGH 7.5 | 4.0 % | KEV | |
| CVE-2019-7482 | 9.0.0.3 and earlier | Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnera | CRITICAL 9.8 | 8.8 % | ||
| CVE-2019-7481 | 9.0.0.3 and earlier | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted | HIGH 7.5 | 100 % | KEV |