Sonicwall Sma100 vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Sonicwall Sma100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-7481sonicwallsma_100_firmware+1KEVRansomware
EPSS score99.91%
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.CVE-2019-7482sonicwallsma_100_firmware+1EPSS score8.82%
Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.CVE-2019-7483sonicwallsma_100_firmware+1KEVEPSS score4.01%
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.CVE-2019-7484sonicwallsma_100_firmware+1EPSS score0.84%
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.CVE-2019-7486sonicwallsma_100_firmware+1EPSS score1.58%
Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.CVE-2019-7485sonicwallsma_100_firmware+1EPSS score1.53%
Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.CVE-2023-5970sonicwallsma_200_firmware+5EPSS score0.91%
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.CVE-2023-44221sonicwallsma_200_firmware+5KEVEPSS score76.25%
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability.