Aller au contenu

Vulnérabilités connues pour SonicWall SMA100

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-40603 A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote,… 4.5 Moyenne 31 oct. 2025
CVE-2025-32821 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin… 7.1 Élevée 7 mai 2025
CVE-2025-32820 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal… 8.3 Élevée 7 mai 2025
CVE-2025-32819 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path… 8.8 Élevée 7 mai 2025
CVE-2024-53703 A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by… 8.1 Élevée 5 déc. 2024
CVE-2024-53702 Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN… 5.3 Moyenne 5 déc. 2024
CVE-2024-45319 A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote… 6.3 Moyenne 5 déc. 2024
CVE-2024-45318 A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based… 8.1 Élevée 5 déc. 2024
CVE-2024-40763 Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy 7.5 Élevée 5 déc. 2024
CVE-2024-22395 Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific… 6.3 Moyenne 23 févr. 2024
CVE-2023-5970 Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create… Non notée 5 déc. 2023
CVE-2023-44221 Exploitée SonicWall SMA100 Appliances OS Command Injection Vulnerability 7.2 Élevée 5 déc. 2023
CVE-2022-2915 A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to… Non notée 26 août 2022
CVE-2022-1703 Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a… Non notée 3 juin 2022
CVE-2021-20035 Exploitée SonicWall SMA100 Appliances OS Command Injection Vulnerability 6.5 Moyenne 27 sept. 2021
CVE-2021-20034 An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal… Non notée 27 sept. 2021
CVE-2021-20018 A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the… Non notée 13 mars 2021
CVE-2021-20017 A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute… Non notée 13 mars 2021
CVE-2020-5146 A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection… Non notée 9 janv. 2021
CVE-2020-5132 SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as… Non notée 30 sept. 2020
CVE-2019-7484 Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using… Non notée 19 déc. 2019
CVE-2019-7486 Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script Non notée 19 déc. 2019
CVE-2019-7485 Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script Non notée 19 déc. 2019
CVE-2019-7483 Exploitée SonicWall SMA100 Directory Traversal Vulnerability 7.5 Élevée 19 déc. 2019
CVE-2019-7482 Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function… Non notée 19 déc. 2019

Autres produits SonicWall