Skip to content

Sonicwall Firmware vulnerabilities

sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a...CVE-2021-20043EPSS 23.3%8.8 HighDecember 8, 2021
sonicwall sma 200 firmware, sma 210 firmware, sma 400 firmware +3 more +5 moreAn unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary...CVE-2021-200429.8 CriticalDecember 8, 2021
sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreAn unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP...CVE-2021-20041EPSS 21.2%7.5 HighDecember 8, 2021
sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA relative path traversal vulnerability in the SMA100 upload funtion allows a remote...CVE-2021-20040EPSS 25.1%7.5 HighDecember 8, 2021
sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreImproper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert...CVE-2021-20039Public exploitEPSS 78.7%8.8 HighDecember 8, 2021
sonicwall sma100, sma 100 appliances, sma 200 firmware +4 more +6 moreA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module...CVE-2021-20038In KEVPublic exploitEPSS 99.9%9.8 CriticalDecember 8, 2021
sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 moreImproper neutralization of special elements in the SMA100 management interface allows a remote...CVE-2021-20035In KEV6.5 MediumSeptember 27, 2021
sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreAn improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to...CVE-2021-20034Public exploitEPSS 81.8%9.1 CriticalSeptember 27, 2021
sonicwall secure remote access (sra), sma 210 firmware, sma 410 firmware +5 more +7 more** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection...CVE-2021-20028In KEVEPSS 30.1%9.8 CriticalAugust 4, 2021
debian linux, linux kernel, fedoraproject fedora +4 more +6 morefs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict...CVE-2021-33909Public exploitFix available7.8 HighJuly 20, 2021
sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post...CVE-2021-20023In KEVEPSS 51.7%4.9 MediumApril 20, 2021
sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post...CVE-2021-20022In KEVEPSS 16.6%7.2 HighApril 9, 2021
sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreA vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an...CVE-2021-20021In KEVPublic exploitEPSS 88.8%9.8 CriticalApril 9, 2021
openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 HighMarch 25, 2021
openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 MediumMarch 25, 2021
sonicwall sma100, sma100 firmware +1 moreA post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the...CVE-2021-200184.9 MediumMarch 13, 2021
sonicwall sma100, sma100 firmware +1 moreA post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated...CVE-2021-200178.8 HighMarch 13, 2021
sonicwall sma100, sslvpn sma100, sma 100 firmware +5 more +7 moreA SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote...CVE-2021-20016In KEVEPSS 40.0%9.8 CriticalFebruary 3, 2021
sonicwall sma100, sma 100 firmware +1 moreA vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform...CVE-2020-51467.2 HighJanuary 9, 2021
sonicwall sma100, sma1000, sma100 firmware +1 more +3 moreSonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to...CVE-2020-51325.3 MediumSeptember 30, 2020
sonicwall sma1000, sma1000 firmware +1 moreA vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote...CVE-2020-51297.5 HighMarch 26, 2020
sonicwall sma100, sma 100 firmware +1 moreCode injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in...CVE-2019-74868.8 HighDecember 19, 2019
sonicwall sma100, sma 100 firmware +1 moreBuffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in...CVE-2019-74858.8 HighDecember 19, 2019
sonicwall sma100, sma 100 firmware +1 moreAuthenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to...CVE-2019-74846.5 MediumDecember 19, 2019
sonicwall sma100, sma 100 firmware +1 moreIn SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the...CVE-2019-7483In KEV7.5 HighDecember 19, 2019
sonicwall sma100, sma 100 firmware +1 moreStack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute...CVE-2019-7482Public exploit9.8 CriticalDecember 19, 2019
sonicwall sma100, sma 100 firmware +1 moreVulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to...CVE-2019-7481In KEVEPSS 99.9%7.5 HighDecember 17, 2019
sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1...CVE-2016-23979.8 CriticalFebruary 17, 2016
sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8...CVE-2016-23969.9 CriticalFebruary 17, 2016
sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before...CVE-2015-39909.0 HighMay 20, 2015
sonicwall remote access firmwareCross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure...CVE-2015-2248Public exploit6.8 MediumMay 1, 2015
sonicwall analyzer, global management system, uma e5000 firmware +2 moreMultiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert...CVE-2013-7025Public exploit3.5 LowDecember 9, 2013
sonicwall soho firmwareMultiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote...CVE-2005-1006Public exploit4.3 MediumApril 7, 2005
sonicwall firmwareSonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and...CVE-2003-13205.1 MediumDecember 31, 2003
sonicwall soho firmwareSonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to...CVE-2001-1104Public exploit7.5 HighJuly 25, 2001