Vulnerabilidades do Sonicwall Sma7200 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Sonicwall Sma7200 Firmware: 7 registro(s), com versões afetadas e correções.cpe:2.3:o:sonicwall:sma7200_firmware
CVE-2026-4116
Alta · 7.2
CWE-176 09/04/2026
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4114
Média · 6.6
CWE-176 09/04/2026
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4113
Alta · 7.2
CWE-204 09/04/2026
An observable response discrepancy vulnerability in the SonicWall SMA1000 series…
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112
Alta · 7.2
CWE-89 09/04/2026
SQL Injection em Sonicwall Sma6210 Firmware
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
CVE-2025-40602
Média · 6.6
KEV Alta · 57 Exploit público CWE-250 18/12/2025
SonicWall SMA1000 Missing Authorization Vulnerability
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2025-23006
Crítica · 9.8
KEV Urgente · 73 Ransomware CWE-502 23/01/2025
SonicWall SMA1000 Appliances Deserialization Vulnerability
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.
CVE-2024-6387
Alta · 8.1
CWE-362 01/07/2024
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.