Sonicwall Sma 500v vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sonicwall Sma 500v: 2 record(s), with affected versions and fixes.
cpe:2.3:a:sonicwall:sma_500v

CVE-2021-20035 Medium · 6.5 KEV High · 52 CWE-78 Sep 27, 2021

SonicWall SMA100 Appliances OS Command Injection Vulnerability

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

CVE-2021-20016 Critical · 9.8 KEV Urgent · 73 Ransomware CWE-89 Feb 4, 2021

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.