Sonicwall Sma7200 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sonicwall Sma7200 Firmware: 7 record(s), with affected versions and fixes.cpe:2.3:o:sonicwall:sma7200_firmware
CVE-2026-4116
High · 7.2
CWE-176 Apr 9, 2026
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4114
Medium · 6.6
CWE-176 Apr 9, 2026
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4113
High · 7.2
CWE-204 Apr 9, 2026
An observable response discrepancy vulnerability in the SonicWall SMA1000 series…
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112
High · 7.2
CWE-89 Apr 9, 2026
SQL Injection in Sonicwall Sma6210 Firmware
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
CVE-2025-40602
Medium · 6.6
KEV High · 57 Public exploit CWE-250 Dec 18, 2025
SonicWall SMA1000 Missing Authorization Vulnerability
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2025-23006
Critical · 9.8
KEV Urgent · 73 Ransomware CWE-502 Jan 23, 2025
SonicWall SMA1000 Appliances Deserialization Vulnerability
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
CVE-2024-6387
High · 8.1
CWE-362 Jul 1, 2024
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.