Skip to content

Known vulnerabilities in SonicWall SMA100

Is your version affected?

CVE Summary Score Published
CVE-2021-20050 An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being… Not rated Dec 23, 2021
CVE-2021-20049 A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100… Not rated Dec 23, 2021
CVE-2021-20045 A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated… Not rated Dec 8, 2021
CVE-2021-20044 A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated… Not rated Dec 8, 2021
CVE-2021-20043 A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated… Not rated Dec 8, 2021
CVE-2021-20042 An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass… Not rated Dec 8, 2021
CVE-2021-20041 An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to… Not rated Dec 8, 2021
CVE-2021-20040 A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to… Not rated Dec 8, 2021
CVE-2021-20039 Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method… 8.8 High Dec 8, 2021
CVE-2021-20038 Exploited SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability 9.8 Critical Dec 8, 2021
CVE-2021-20016 Exploited SonicWall SSLVPN SMA100 SQL Injection Vulnerability 9.8 Critical Feb 3, 2021

Other SonicWall products