Sonicwall Sma_410
33 CVEs affecting Sonicwall Sma_410. Latest disclosed: 2025-10-31. Critical: 9, High: 17.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22273 | Critical | 9.8 | 2022-03-17 | Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older f… |
CVE-2021-20045 | Critical | 9.8 | 2021-12-08 | A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as… |
CVE-2021-20042 | Critical | 9.8 | 2021-12-08 | An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affec… |
CVE-2021-20038 | Critical | 9.8 | 2021-12-08 | A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to po… |
CVE-2021-20028 | Critical | 9.8 | 2021-08-04 | Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA… |
CVE-2021-20016 | Critical | 9.8 | 2021-02-04 | A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password… |
CVE-2025-40599 | Critical | 9.1 | 2025-07-23 | An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges ca… |
CVE-2024-38475 | Critical | 9.1 | 2024-07-01 | Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted t… |
CVE-2021-20034 | Critical | 9.1 | 2021-09-27 | An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file po… |
CVE-2025-32820 | High | 8.8 | 2025-05-07 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the… |
CVE-2025-32819 | High | 8.8 | 2025-05-07 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file p… |
CVE-2023-5970 | High | 8.8 | 2023-12-05 | Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using ac… |
CVE-2022-2915 | High | 8.8 | 2022-08-26 | A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the app… |
CVE-2022-1703 | High | 8.8 | 2022-06-08 | Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Com… |
CVE-2021-20044 | High | 8.8 | 2021-12-08 | A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the ap… |
CVE-2021-20043 | High | 8.8 | 2021-12-08 | A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the no… |
CVE-2021-20039 | High | 8.8 | 2021-12-08 | Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to i… |
CVE-2024-53703 | High | 8.1 | 2024-12-05 | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote at… |
CVE-2024-45318 | High | 8.1 | 2024-12-05 | A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to co… |
CVE-2025-40597 | High | 7.5 | 2025-07-23 | A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or poten… |