# SonicWall SMA100.

Every CVE that names SonicWall SMA100 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Sensitive information in log files in SonicWall SMA100](https://agentprime.io/advisories/CVE-2025-40603.md)
  `CVE-2025-40603` · CVE record: SonicWall SMA100 · CVSS 4.5 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Information disclosure
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2025-32821.md)
  `CVE-2025-32821` · CVE record: SonicWall SMA100 · CVSS 7.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 7 May 2025 · Tags: Command injection
- [Path traversal in SonicWall SMA100](https://agentprime.io/advisories/CVE-2025-32820.md)
  `CVE-2025-32820` · CVE record: SonicWall SMA100 · CVSS 8.3 High · Not analysed yet · Published 7 May 2025 · Tags: Path traversal
- [Files accessible to external parties in SonicWall SMA100](https://agentprime.io/advisories/CVE-2025-32819.md)
  `CVE-2025-32819` · CVE record: SonicWall SMA100 · CVSS 8.8 High · Not analysed yet · Published 7 May 2025 · Tags: Information disclosure
- [Stack-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2024-53703.md)
  `CVE-2024-53703` · CVE record: SonicWall SMA100 · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 5 Dec 2024 · Tags: Memory corruption
- [Weak random number generator in SonicWall SMA100](https://agentprime.io/advisories/CVE-2024-53702.md)
  `CVE-2024-53702` · CVE record: SonicWall SMA100 · CVSS 5.3 Medium · Not analysed yet · Published 5 Dec 2024 · Tags: Weak cryptography or TLS
- [Hard-coded credentials in SonicWall SMA100](https://agentprime.io/advisories/CVE-2024-45319.md)
  `CVE-2024-45319` · CVE record: SonicWall SMA100 · CVSS 6.3 Medium · Not analysed yet · Published 5 Dec 2024 · Tags: Hard-coded credentials
- [Stack-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2024-45318.md)
  `CVE-2024-45318` · CVE record: SonicWall SMA100 · CVSS 8.1 High · Not analysed yet · Published 5 Dec 2024 · Tags: Memory corruption
- [Heap-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2024-40763.md)
  `CVE-2024-40763` · CVE record: SonicWall SMA100 · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2024 · Tags: Memory corruption
- [Improper authentication in SonicWall SMA100](https://agentprime.io/advisories/CVE-2024-22395.md)
  `CVE-2024-22395` · CVE record: SonicWall SMA100 · CVSS 6.3 Medium · Not analysed yet · Published 23 Feb 2024 · Tags: Authentication bypass
- [Improper authentication in SonicWall SMA100](https://agentprime.io/advisories/CVE-2023-5970.md)
  `CVE-2023-5970` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 5 Dec 2023 · Tags: Authentication bypass
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2023-44221.md)
  `CVE-2023-44221` · CVE record: SonicWall SMA100 · CVSS 7.2 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.76 · Not analysed yet · Published 5 Dec 2023 · Tags: Command injection
- [Heap-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2022-2915.md)
  `CVE-2022-2915` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 26 Aug 2022 · Tags: Memory corruption
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2022-1703.md)
  `CVE-2022-1703` · CVE record: SonicWall SMA100 · No CVSS score · EPSS 0.13 · Not analysed yet · Published 3 Jun 2022 · Tags: Command injection
- [Improper access control in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20050.md)
  `CVE-2021-20050` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · Not analysed yet · Published 23 Dec 2021 · Tags: Broken access control
- [SonicWall SMA100: A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated…](https://agentprime.io/advisories/CVE-2021-20049.md)
  `CVE-2021-20049` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · Not analysed yet · Published 23 Dec 2021 · Tags: CWE-204
- [Buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20045.md)
  `CVE-2021-20045` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · EPSS 0.25 · Not analysed yet · Published 8 Dec 2021 · Tags: Memory corruption
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20044.md)
  `CVE-2021-20044` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · EPSS 0.40 · Not analysed yet · Published 8 Dec 2021 · Tags: Command injection
- [Heap-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20043.md)
  `CVE-2021-20043` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · EPSS 0.23 · Not analysed yet · Published 8 Dec 2021 · Tags: Memory corruption
- [An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.](https://agentprime.io/advisories/CVE-2021-20042.md)
  `CVE-2021-20042` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-441
- [Infinite loop in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20041.md)
  `CVE-2021-20041` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · EPSS 0.21 · Not analysed yet · Published 8 Dec 2021 · Tags: Denial of service
- [Path traversal in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20040.md)
  `CVE-2021-20040` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · EPSS 0.25 · Not analysed yet · Published 8 Dec 2021 · Tags: Path traversal
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20039.md)
  `CVE-2021-20039` · CVE record: SonicWall SonicWall SMA100 · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.79 · Not analysed yet · Published 8 Dec 2021 · Tags: Command injection
- [Stack-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20038.md)
  `CVE-2021-20038` · CVE record: SonicWall SonicWall SMA100 · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 8 Dec 2021 · Tags: Memory corruption
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20035.md)
  `CVE-2021-20035` · CVE record: SonicWall SMA100 · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 27 Sept 2021 · Tags: Command injection
- [Improper access control in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20034.md)
  `CVE-2021-20034` · CVE record: SonicWall SMA100 · No CVSS score · EPSS 0.82 · Not analysed yet · Published 27 Sept 2021 · Tags: Broken access control
- [Information disclosure in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20018.md)
  `CVE-2021-20018` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 13 Mar 2021 · Tags: Information disclosure
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20017.md)
  `CVE-2021-20017` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 13 Mar 2021 · Tags: Command injection
- [SQL injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2021-20016.md)
  `CVE-2021-20016` · CVE record: SonicWall SonicWall SMA100 · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.40 · Not analysed yet · Published 3 Feb 2021 · Tags: SQL injection
- [OS command injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2020-5146.md)
  `CVE-2020-5146` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 9 Jan 2021 · Tags: Command injection
- [Information disclosure in SonicWall SMA100 and others](https://agentprime.io/advisories/CVE-2020-5132.md)
  `CVE-2020-5132` · CVE record: SonicWall SMA100 and 2 more · No CVSS score · Not analysed yet · Published 30 Sept 2020 · Tags: Information disclosure
- [Code injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2019-7486.md)
  `CVE-2019-7486` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 19 Dec 2019 · Tags: Code injection
- [Buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2019-7485.md)
  `CVE-2019-7485` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 19 Dec 2019 · Tags: Memory corruption
- [SQL injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2019-7484.md)
  `CVE-2019-7484` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 19 Dec 2019 · Tags: SQL injection
- [Path traversal in SonicWall SMA100](https://agentprime.io/advisories/CVE-2019-7483.md)
  `CVE-2019-7483` · CVE record: SonicWall SMA100 · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 19 Dec 2019 · Tags: Path traversal
- [Stack-based buffer overflow in SonicWall SMA100](https://agentprime.io/advisories/CVE-2019-7482.md)
  `CVE-2019-7482` · CVE record: SonicWall SMA100 · No CVSS score · Not analysed yet · Published 19 Dec 2019 · Tags: Memory corruption
- [SQL injection in SonicWall SMA100](https://agentprime.io/advisories/CVE-2019-7481.md)
  `CVE-2019-7481` · CVE record: SonicWall SMA100 · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 17 Dec 2019 · Tags: SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=sonicwall-sma100>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/sonicwall-sma100/>. Everything for agents: <https://agentprime.io/llms.txt>.