Vulnerability index

Browse CVEs

16 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Sma6210 Firmware CRITICAL 10.0
CVE-2026-15409 KEVEPSS 74%

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attack…

Mitigation only
Fix from $2,300 2026-07-14
Sma6210 Firmware HIGH 7.2
CVE-2026-15410 KEVEPSS 76%

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management C…

Mitigation only
Fix from $1,950 2026-07-14
Sma6200 Firmware MEDIUM 6.6
CVE-2025-40602 KEV

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Fix: 12.4.3-03245 / 12.5.0-02283+
Fix from $1,600 2025-12-18
Sma8200v CRITICAL 9.8
CVE-2025-23006 KEVEPSS 23%

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central …

Fix: 12.4.3-02854+
Fix from $2,300 2025-01-23
Sonicos CRITICAL 9.8
CVE-2024-53704 KEVEPSS 95%

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Fix: after 7.1.1-7058
Fix from $2,300 2025-01-09
Sonicos CRITICAL 9.8
CVE-2024-40766 KEVEPSS 18%

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource…

Fix: 5.9.2.14-13o / 6.5.2.8-2n+
Fix from $2,300 2024-08-23
Sma 200 Firmware HIGH 7.2
CVE-2023-44221 KEVEPSS 75%

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative pri…

Fix: after 10.2.1.9-57sv
Fix from $1,950 2023-12-05
Sma 200 Firmware CRITICAL 9.8
CVE-2021-20038 KEVEPSS 100%

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated atta…

Mitigation only
Fix from $2,300 2021-12-08
Sma 200 Firmware MEDIUM 6.5
CVE-2021-20035 KEV

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as…

Fix: 9.0.0.11-31sv / 10.2.0.8-37sv+
Fix from $1,600 2021-09-27
Sma 210 Firmware CRITICAL 9.8
CVE-2021-20028 KEVEPSS 30%

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifical…

Fix: 9.0.0.10-28sv+
Fix from $2,300 2021-08-04
Email Security CRITICAL 9.8
CVE-2021-20021 KEVEPSS 83%

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP req…

Fix: 10.0.9.6103 / 10.0.9.6105+
Fix from $2,300 2021-04-09
Email Security HIGH 7.2
CVE-2021-20022 KEVEPSS 17%

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remot…

Fix: 10.0.9.6103 / 10.0.9.6105+
Fix from $1,950 2021-04-09
Sma 100 Firmware CRITICAL 9.8
CVE-2021-20016 KEVEPSS 37%

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username…

Fix: 10.2.0.5-d-29sv+
Fix from $2,300 2021-02-04
Sonicos CRITICAL 9.8
CVE-2020-5135 KEVEPSS 25%

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sendin…

Fix: after 6.5.4.7
Fix from $2,300 2020-10-12
Sma 100 Firmware HIGH 7.5
CVE-2019-7483 KEV

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a …

Fix: 9.0.0.4+
Fix from $1,950 2019-12-19
Sma 100 Firmware HIGH 7.5
CVE-2019-7481 KEVEPSS 100%

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 ve…

Fix: 9.0.0.4+
Fix from $1,950 2019-12-17