Sonicwall Sma 100 vulnerabilities
13 vulnerabilities
Known vulnerabilities in Sonicwall Sma 100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-20049sonicwallsma_100_firmware+6
EPSS score1.39%
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.CVE-2021-20016sonicwallsma_100_firmware+6KEVRansomwareEPSS score40.04%
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.CVE-2021-20050sonicwallsma_100_firmware+6EPSS score0.93%
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.CVE-2025-32820sonicwallsma_100_firmware+6EPSS score2.88%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.CVE-2025-32819sonicwallsma_100_firmware+6EPSS score6.45%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.CVE-2025-32821sonicwallsma_100_firmware+6EPSS score22.24%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.CVE-2020-5146sonicwallsma_100_firmware+1EPSS score1.91%
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.CVE-2019-7481sonicwallsma_100_firmware+1KEVRansomwareEPSS score99.91%
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.CVE-2019-7482sonicwallsma_100_firmware+1EPSS score8.82%
Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.CVE-2019-7483sonicwallsma_100_firmware+1KEVEPSS score4.01%
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.CVE-2019-7484sonicwallsma_100_firmware+1EPSS score0.84%
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.CVE-2019-7486sonicwallsma_100_firmware+1EPSS score1.58%
Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.CVE-2019-7485sonicwallsma_100_firmware+1EPSS score1.53%
Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.