Sonicwall SMA100 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sonicwall SMA100: 7 record(s), with affected versions and fixes.
CVE-2025-40603
Medium · 4.5
CWE-532 Oct 31, 2025
Insertion of Sensitive Information into Log File in Sonicwall Sma 210 Firmware
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.
CVE-2023-44221
High · 7.2
KEV High · 56 CWE-78 Dec 5, 2023
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
CVE-2021-20038
Critical · 9.8
KEV Urgent · 83 Public exploit Ransomware CWE-121 Dec 8, 2021
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.
CVE-2021-20035
Medium · 6.5
KEV High · 52 CWE-78 Sep 27, 2021
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
CVE-2021-20016
Critical · 9.8
KEV Urgent · 73 Ransomware CWE-89 Feb 4, 2021
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.
CVE-2019-7483
High · 7.5
KEV High · 58 CWE-22 Dec 18, 2019
SonicWall SMA100 Directory Traversal Vulnerability
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
CVE-2019-7481
High · 7.5
KEV Urgent · 73 Public exploit Ransomware CWE-89 Dec 17, 2019
SonicWall SMA100 SQL Injection Vulnerability
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.