CVE Intelligence

Vulnerabilidades do Sonicwall SMA100

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Sonicwall SMA100: 7 registro(s), com versões afetadas e correções.

CVE-2025-40603 Média · 4.5 CWE-532 31/10/2025
Insertion of Sensitive Information into Log File em Sonicwall Sma 210 Firmware
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.
CVE-2023-44221 Alta · 7.2 KEV Alta · 56 CWE-78 05/12/2023
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.
CVE-2021-20038 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-121 08/12/2021
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.
CVE-2021-20035 Média · 6.5 KEV Alta · 52 CWE-78 27/09/2021
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
CVE-2021-20016 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-89 04/02/2021
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.
CVE-2019-7483 Alta · 7.5 KEV Alta · 58 CWE-22 18/12/2019
SonicWall SMA100 Directory Traversal Vulnerability
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
CVE-2019-7481 Alta · 7.5 KEV Urgente · 73 Exploit público Ransomware CWE-89 17/12/2019
SonicWall SMA100 SQL Injection Vulnerability
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.