Vulnerability in Sonicwall Sma100

CVE-2025-32819

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.

EPSS: 0.009 (75.4th percentile) — read the EPSS interpretation.

Affected products

Sonicwall Sma100 — versions 10.2.1.14-75sv and earlier versions

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011 (vendor-advisory)