Skip to content

Known vulnerabilities in SonicWall SMA100

Is your version affected?

CVE Summary Score Published
CVE-2025-40603 A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote,… 4.5 Medium Oct 31, 2025
CVE-2025-32821 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin… 7.1 High May 7, 2025
CVE-2025-32820 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal… 8.3 High May 7, 2025
CVE-2025-32819 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path… 8.8 High May 7, 2025
CVE-2024-53703 A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by… 8.1 High Dec 5, 2024
CVE-2024-53702 Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN… 5.3 Medium Dec 5, 2024
CVE-2024-45319 A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote… 6.3 Medium Dec 5, 2024
CVE-2024-45318 A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based… 8.1 High Dec 5, 2024
CVE-2024-40763 Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy 7.5 High Dec 5, 2024
CVE-2024-22395 Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific… 6.3 Medium Feb 23, 2024
CVE-2023-5970 Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create… Not rated Dec 5, 2023
CVE-2023-44221 Exploited SonicWall SMA100 Appliances OS Command Injection Vulnerability 7.2 High Dec 5, 2023
CVE-2022-2915 A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to… Not rated Aug 26, 2022
CVE-2022-1703 Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a… Not rated Jun 3, 2022
CVE-2021-20035 Exploited SonicWall SMA100 Appliances OS Command Injection Vulnerability 6.5 Medium Sep 27, 2021
CVE-2021-20034 An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal… Not rated Sep 27, 2021
CVE-2021-20018 A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the… Not rated Mar 13, 2021
CVE-2021-20017 A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute… Not rated Mar 13, 2021
CVE-2020-5146 A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection… Not rated Jan 9, 2021
CVE-2020-5132 SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as… Not rated Sep 30, 2020
CVE-2019-7484 Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using… Not rated Dec 19, 2019
CVE-2019-7486 Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script Not rated Dec 19, 2019
CVE-2019-7485 Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script Not rated Dec 19, 2019
CVE-2019-7483 Exploited SonicWall SMA100 Directory Traversal Vulnerability 7.5 High Dec 19, 2019
CVE-2019-7482 Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function… Not rated Dec 19, 2019

Other SonicWall products