Sonicwall Sma6200 vulnerabilities

6 vulnerabilities

Known vulnerabilities in Sonicwall Sma6200, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.6CVE-2025-40602sonicwallsma1000_firmware+5KEV
EPSS score
2.76%
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).9.8CVE-2025-23006sonicwallsma1000_firmware+8KEVRansomware
EPSS score
23.43%
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.7.2CVE-2026-4116sonicwallsma1000_firmware+5
EPSS score
0.71%
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.7.2CVE-2026-4112sonicwallsma1000_firmware+5
EPSS score
0.53%
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.7.2CVE-2026-4113sonicwallsma1000_firmware+5
EPSS score
0.60%
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.6.6CVE-2026-4114sonicwallsma1000_firmware+5
EPSS score
0.74%
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.