Sonicwall Sma 500v vulnerabilities

• sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 more A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances... CVE-2025-40603 4.5 MediumOctober 31, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface,... CVE-2025-40598 EPSS 46.2% 6.1 MediumJuly 23, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote,... CVE-2025-40597 EPSS 22.7% 7.5 HighJuly 23, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote,... CVE-2025-40596 EPSS 45.3% 7.3 HighJuly 23, 2025
• sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 more An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management... CVE-2025-40599 9.1 CriticalJuly 23, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can... CVE-2025-32821 EPSS 23.5% 7.2 HighMay 7, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can... CVE-2025-32820 8.8 HighMay 7, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to... CVE-2025-32819 8.8 HighMay 7, 2025
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... CVE-2024-53703 Public exploit EPSS 12.6% 8.1 HighDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the... CVE-2024-53702 5.3 MediumDecember 5, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... CVE-2024-45319 6.3 MediumDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers... CVE-2024-45318 8.1 HighDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy.... CVE-2024-40763 7.5 HighDecember 5, 2024
• apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 more Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. CVE-2024-38475 In KEVPublic exploitFix available EPSS 100.0% 9.1 CriticalJuly 1, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office... CVE-2024-22395 6.3 MediumFebruary 23, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated... CVE-2023-5970 8.8 HighDecember 5, 2023
• sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a... CVE-2023-44221 In KEV EPSS 76.2% 7.2 HighDecember 5, 2023
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote... CVE-2022-2915 8.8 HighAugust 26, 2022
• sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 more Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management... CVE-2022-1703 EPSS 13.0% 8.8 HighJune 3, 2022
• sonicwall sma 210 firmware, sma 410 firmware, sma 500v firmware +3 more +5 more ** UNSUPPORTED WHEN ASSIGNED ** A post-authentication arbitrary file read vulnerability impacting... CVE-2022-22279 4.9 MediumApril 13, 2022
• sonicwall sra, sma 100, sma 200 firmware +9 more +11 more ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of Special Elements leading to OS Command... CVE-2022-22273 9.8 CriticalMarch 17, 2022
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted... CVE-2021-20050 7.5 HighDecember 23, 2021
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker... CVE-2021-20049 7.5 HighDecember 23, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a... CVE-2021-20045 EPSS 25.2% 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote... CVE-2021-20044 EPSS 40.1% 8.8 HighDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a... CVE-2021-20043 EPSS 23.3% 8.8 HighDecember 8, 2021
• sonicwall sma 200 firmware, sma 210 firmware, sma 400 firmware +3 more +5 more An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary... CVE-2021-20042 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP... CVE-2021-20041 EPSS 21.2% 7.5 HighDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A relative path traversal vulnerability in the SMA100 upload funtion allows a remote... CVE-2021-20040 EPSS 25.1% 7.5 HighDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert... CVE-2021-20039 Public exploit EPSS 78.7% 8.8 HighDecember 8, 2021
• sonicwall sma100, sma 100 appliances, sma 200 firmware +4 more +6 more A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module... CVE-2021-20038 In KEVPublic exploit EPSS 99.9% 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 management interface allows a remote... CVE-2021-20035 In KEV 6.5 MediumSeptember 27, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to... CVE-2021-20034 Public exploit EPSS 81.8% 9.1 CriticalSeptember 27, 2021
• sonicwall secure remote access (sra), sma 210 firmware, sma 410 firmware +5 more +7 more ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection... CVE-2021-20028 In KEV EPSS 30.1% 9.8 CriticalAugust 4, 2021
• sonicwall sma100, sslvpn sma100, sma 100 firmware +5 more +7 more A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote... CVE-2021-20016 In KEV EPSS 40.0% 9.8 CriticalFebruary 3, 2021