Sonicwall vulnerabilities, page 4
272 vulnerabilities
Known vulnerabilities in Sonicwall products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 177 products.
CVE-2016-2397sonicwallanalyzer+2
EPSS score6.44%
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.CVE-2025-40604sonicwallemail_security+5EPSS score0.19%
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.CVE-2025-40595sonicwallsma1000_firmwareEPSS score0.36%
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.CVE-2025-40598sonicwallsma 100 series+3EPSS score64.45%
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.CVE-2025-40605sonicwallemail_security+5EPSS score0.33%
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.CVE-2025-40597sonicwallsma 100 series+3EPSS score31.25%
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.CVE-2025-40603sonicwallsma_210_firmware+3EPSS score0.48%
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.CVE-2025-40602sonicwallsma1000_firmware+5KEVEPSS score2.76%
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).CVE-2025-40601sonicwallsonicosEPSS score1.17%
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.CVE-2025-40596sonicwallsma 100 series+3EPSS score57.35%
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.CVE-2025-40600sonicwallsonicosEPSS score0.91%
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.CVE-2025-40599sonicwallsma 100 series+3EPSS score14.70%
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution.CVE-2025-2170sonicwallsma1000_firmwareEPSS score0.34%
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location.CVE-2025-32820sonicwallsma_100_firmware+6EPSS score2.88%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.CVE-2025-32818sonicwallsonicosEPSS score0.83%
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition.CVE-2025-32819sonicwallsma_100_firmware+6EPSS score6.45%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.CVE-2025-32817sonicwallconnect tunnelEPSS score0.35%
A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption.CVE-2025-32821sonicwallsma_100_firmware+6EPSS score22.24%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.CVE-2025-23006sonicwallsma1000_firmware+8KEVRansomwareEPSS score23.43%
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.CVE-2025-23009sonicwallnetextenderEPSS score0.37%
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an arbitrary file deletion.