Sonicwall Firmware vulnerabilities

• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS... CVE-2026-83549 In KEVPublic exploit 7.8 HighSeptember 1, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due... CVE-2026-83548 In KEVPublic exploit 10.0 CriticalSeptember 1, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more Post-authentication improper control of generation of code ('Code Injection') vulnerability has... CVE-2026-15410 In KEVPublic exploit EPSS 11.8% 7.2 HighJuly 14, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... CVE-2026-15409 In KEVPublic exploit 10.0 CriticalJuly 14, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote... CVE-2026-4116 7.2 HighApril 9, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote... CVE-2026-4114 6.6 MediumApril 9, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances... CVE-2026-4113 7.2 HighApril 9, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall... CVE-2026-4112 Public exploit 7.2 HighApril 9, 2026
• sonicwall sma1000, sma1000 appliance, sma6200 firmware +4 more +6 more A local privilege escalation vulnerability due to insufficient authorization in the SonicWall... CVE-2025-40602 In KEVPublic exploit 6.6 MediumDecember 18, 2025
• sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 more A Path Traversal vulnerability has been identified in the Email Security appliance allows an... CVE-2025-40605 5.3 MediumNovember 20, 2025
• sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 more Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance... CVE-2025-40604 9.8 CriticalNovember 20, 2025
• sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 more A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances... CVE-2025-40603 4.5 MediumOctober 31, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface,... CVE-2025-40598 EPSS 46.2% 6.1 MediumJuly 23, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote,... CVE-2025-40597 EPSS 22.7% 7.5 HighJuly 23, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote,... CVE-2025-40596 EPSS 45.3% 7.3 HighJuly 23, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management... CVE-2025-40599 9.1 CriticalJuly 23, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can... CVE-2025-32821 EPSS 23.5% 7.2 HighMay 7, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can... CVE-2025-32820 8.8 HighMay 7, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to... CVE-2025-32819 8.8 HighMay 7, 2025
• sonicwall sma1000, sma1000 firmware +1 more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... CVE-2025-2170 7.2 HighApril 30, 2025
• sonicwall sma1000, sma1000 appliances, sma6200 firmware +7 more +9 more Pre-authentication deserialization of untrusted data vulnerability has been identified in the... CVE-2025-23006 In KEV EPSS 26.6% 9.8 CriticalJanuary 23, 2025
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... CVE-2024-53703 Public exploit EPSS 12.6% 8.1 HighDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the... CVE-2024-53702 5.3 MediumDecember 5, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... CVE-2024-45319 6.3 MediumDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers... CVE-2024-45318 8.1 HighDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy.... CVE-2024-40763 7.5 HighDecember 5, 2024
• apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 more Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. CVE-2024-38475 In KEVPublic exploitFix available EPSS 100.0% 9.1 CriticalJuly 1, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office... CVE-2024-22395 6.3 MediumFebruary 23, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated... CVE-2023-5970 8.8 HighDecember 5, 2023
• sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a... CVE-2023-44221 In KEV EPSS 76.2% 7.2 HighDecember 5, 2023
• ieee 802.11, sonicwall soho 250 firmware, soho 250w firmware +27 more +29 more The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept... CVE-2022-47522 Public exploit 7.5 HighApril 15, 2023
• sonicwall sma1000 firmware, sma1000 +1 more Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows... CVE-2023-0126 EPSS 72.7% 7.5 HighJanuary 19, 2023
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote... CVE-2022-2915 8.8 HighAugust 26, 2022
• sonicwall switch, sws12-10fpoe firmware, sws12-8 firmware +5 more +7 more Improper neutralization of special elements used in a user input allows an authenticated... CVE-2022-2323 8.8 HighJuly 29, 2022
• sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 more Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management... CVE-2022-1703 EPSS 13.0% 8.8 HighJune 3, 2022
• sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 more SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts... CVE-2022-22282 9.8 CriticalMay 13, 2022
• sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 more SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user... CVE-2022-1702 6.1 MediumMay 13, 2022
• sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 more SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and... CVE-2022-1701 7.5 HighMay 13, 2022
• sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 more A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP... CVE-2022-22278 7.5 HighApril 27, 2022
• sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 more A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive... CVE-2022-22277 5.3 MediumApril 27, 2022
• sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 more A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an... CVE-2022-22276 5.3 MediumApril 27, 2022
• sonicwall sma 210 firmware, sma 410 firmware, sma 500v firmware +3 more +5 more ** UNSUPPORTED WHEN ASSIGNED ** A post-authentication arbitrary file read vulnerability impacting... CVE-2022-22279 4.9 MediumApril 13, 2022
• sonicwall sra, sma 100, sma 200 firmware +9 more +11 more ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of Special Elements leading to OS Command... CVE-2022-22273 9.8 CriticalMarch 17, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update CVE-2022-0847 In KEVPublic exploitFix available EPSS 92.8% 7.8 HighMarch 7, 2022
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted... CVE-2021-20050 7.5 HighDecember 23, 2021
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker... CVE-2021-20049 7.5 HighDecember 23, 2021
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a... CVE-2021-20045 EPSS 25.2% 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote... CVE-2021-20044 EPSS 40.1% 8.8 HighDecember 8, 2021
• Show olderLoading…