Sonicwall vulnerabilities
272 vulnerabilities
Known vulnerabilities in Sonicwall products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 177 products.
Products
50 of 177- Sonicos82 vulnerabilities
- Sma 21035 vulnerabilities
- Sma 41035 vulnerabilities
- Sma 500V35 vulnerabilities
- Global Management System32 vulnerabilities
- Sma10028 vulnerabilities
- Sma 20027 vulnerabilities
- Sma 40027 vulnerabilities
- GMS24 vulnerabilities
- Sma100022 vulnerabilities
- Sonicosv19 vulnerabilities
- Analytics17 vulnerabilities
- Email Security17 vulnerabilities
- Netextender15 vulnerabilities
- Sma 10013 vulnerabilities
- Sonicwall Sma10011 vulnerabilities
- Analyzer10 vulnerabilities
- Sma621010 vulnerabilities
- Sma721010 vulnerabilities
- Sma8200V10 vulnerabilities
- Global Vpn Client7 vulnerabilities
- Scrutinizer7 vulnerabilities
- Sma62006 vulnerabilities
- Sma72006 vulnerabilities
- Email Security Appliance 50005 vulnerabilities
- Email Security Appliance 50505 vulnerabilities
- Email Security Appliance 70005 vulnerabilities
- Email Security Appliance 70505 vulnerabilities
- Email Security Appliance 90005 vulnerabilities
- Network Security Manager (Nsm)5 vulnerabilities
- Sonicwall Global VPN Client5 vulnerabilities
- Uma Em50005 vulnerabilities
- Email Security Virtual Appliance4 vulnerabilities
- Hosted Email Security4 vulnerabilities
- SMA 100 Series4 vulnerabilities
- Sma 62004 vulnerabilities
- Sma 62104 vulnerabilities
- Sma 72004 vulnerabilities
- Sma 72104 vulnerabilities
- Sonicwall Sma10004 vulnerabilities
- Tz300P4 vulnerabilities
- Tz300W4 vulnerabilities
- Tz3504 vulnerabilities
- Tz350W4 vulnerabilities
- Tz3704 vulnerabilities
- Tz370W4 vulnerabilities
- Tz4004 vulnerabilities
- Tz400W4 vulnerabilities
- Tz4704 vulnerabilities
- Tz470W4 vulnerabilities
CVE-2026-96540sonicwallnetwork security manager (nsm)
EPSS score0.31%
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.CVE-2026-100232sonicwallnetwork security manager (nsm)EPSS score1.15%
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.CVE-2018-9867sonicwallsonicos+1EPSS score0.21%
In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).CVE-2018-9866sonicwallglobal_management_system+1EPSS score4.50%
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier.CVE-2018-5280sonicwallsonicosEPSS score2.51%
SonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure SSO screens.CVE-2018-5691sonicwallanalyzer+1EPSS score0.71%
SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.CVE-2018-3639alpinexen+557EPSS score60.63%
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.CVE-2003-1320sonicwallfirmwareEPSS score2.02%
SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.CVE-2003-1490sonicwallpro100+2EPSS score1.82%
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.CVE-2013-1359sonicwallanalyzer+3EPSS score89.40%
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.CVE-2013-1360sonicwallanalyzer+3EPSS score23.21%
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.CVE-2013-7025sonicwallanalyzer+2EPSS score4.34%
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.CVE-2021-20028sonicwallsma_210_firmware+6KEVRansomwareEPSS score30.08%
Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlierCVE-2021-20044sonicwallsma_200_firmware+5EPSS score40.07%
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.CVE-2021-20043sonicwallsma_200_firmware+5EPSS score23.26%
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.CVE-2021-20018sonicwallsma100_firmwareEPSS score0.70%
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.CVE-2021-20035sonicwallsma_200_firmware+5KEVEPSS score4.18%
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.CVE-2021-20025sonicwallemail_security_virtual_applianceEPSS score0.36%
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.CVE-2021-20049sonicwallsma_100_firmware+6EPSS score1.39%
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.CVE-2021-20047sonicwallglobal_vpn_client+1EPSS score0.88%
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.