Advisories · Technology

SonicWall SMA100.

Every CVE that names SonicWall SMA100 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40603 CVE record

CVSS 4.5 Medium

Sensitive information in log files in SonicWall SMA100
- SonicWall SMA100
- Information disclosure
Not analysed yet 31 Oct 2025
CVE-2025-32821 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 7 May 2025
CVE-2025-32820 CVE record

CVSS 8.3 High

Path traversal in SonicWall SMA100
- SonicWall SMA100
- Path traversal
Not analysed yet 7 May 2025
CVE-2025-32819 CVE record

CVSS 8.8 High

Files accessible to external parties in SonicWall SMA100
- SonicWall SMA100
- Information disclosure
Not analysed yet 7 May 2025
CVE-2024-53703 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Stack-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 5 Dec 2024
CVE-2024-53702 CVE record

CVSS 5.3 Medium

Weak random number generator in SonicWall SMA100
- SonicWall SMA100
- Weak cryptography or TLS
Not analysed yet 5 Dec 2024
CVE-2024-45319 CVE record

CVSS 6.3 Medium

Hard-coded credentials in SonicWall SMA100
- SonicWall SMA100
- Hard-coded credentials
Not analysed yet 5 Dec 2024
CVE-2024-45318 CVE record

CVSS 8.1 High

Stack-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 5 Dec 2024
CVE-2024-40763 CVE record

CVSS 7.5 High

Heap-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 5 Dec 2024
CVE-2024-22395 CVE record

CVSS 6.3 Medium

Improper authentication in SonicWall SMA100
- SonicWall SMA100
- Authentication bypass
Not analysed yet 23 Feb 2024
CVE-2023-5970 CVE record

Improper authentication in SonicWall SMA100
- SonicWall SMA100
- Authentication bypass
Not analysed yet 5 Dec 2023
CVE-2023-44221 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 5 Dec 2023
CVE-2022-2915 CVE record

Heap-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 26 Aug 2022
CVE-2022-1703 CVE record

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 3 Jun 2022
CVE-2021-20050 CVE record

Improper access control in SonicWall SMA100
- SonicWall SMA100
- Broken access control
Not analysed yet 23 Dec 2021
CVE-2021-20049 CVE record

SonicWall SMA100: A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated…
- SonicWall SMA100
- CWE-204
Not analysed yet 23 Dec 2021
CVE-2021-20045 CVE record

Buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 8 Dec 2021
CVE-2021-20044 CVE record

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 8 Dec 2021
CVE-2021-20043 CVE record

Heap-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 8 Dec 2021
CVE-2021-20042 CVE record

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.
- SonicWall SMA100
- CWE-441
Not analysed yet 8 Dec 2021
CVE-2021-20041 CVE record

Infinite loop in SonicWall SMA100
- SonicWall SMA100
- Denial of service
Not analysed yet 8 Dec 2021
CVE-2021-20040 CVE record

Path traversal in SonicWall SMA100
- SonicWall SMA100
- Path traversal
Not analysed yet 8 Dec 2021
CVE-2021-20039 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 8 Dec 2021
CVE-2021-20038 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Stack-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 8 Dec 2021
CVE-2021-20035 CVE record

CVSS 6.5 MediumCritical · KEVKEV

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 27 Sept 2021
CVE-2021-20034 CVE record

Improper access control in SonicWall SMA100
- SonicWall SMA100
- Broken access control
Not analysed yet 27 Sept 2021
CVE-2021-20018 CVE record

Information disclosure in SonicWall SMA100
- SonicWall SMA100
- Information disclosure
Not analysed yet 13 Mar 2021
CVE-2021-20017 CVE record

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 13 Mar 2021
CVE-2021-20016 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

SQL injection in SonicWall SMA100
- SonicWall SMA100
- SQL injection
Not analysed yet 3 Feb 2021
CVE-2020-5146 CVE record

OS command injection in SonicWall SMA100
- SonicWall SMA100
- Command injection
Not analysed yet 9 Jan 2021
CVE-2020-5132 CVE record

Information disclosure in SonicWall SMA100 and others
- SonicWall SMA100
- SonicWall SMA1000
- Information disclosure
Not analysed yet 30 Sept 2020
CVE-2019-7486 CVE record

Code injection in SonicWall SMA100
- SonicWall SMA100
- Code injection
Not analysed yet 19 Dec 2019
CVE-2019-7485 CVE record

Buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 19 Dec 2019
CVE-2019-7484 CVE record

SQL injection in SonicWall SMA100
- SonicWall SMA100
- SQL injection
Not analysed yet 19 Dec 2019
CVE-2019-7483 CVE record

CVSS 7.5 HighCritical · KEVKEV

Path traversal in SonicWall SMA100
- SonicWall SMA100
- Path traversal
Not analysed yet 19 Dec 2019
CVE-2019-7482 CVE record

Stack-based buffer overflow in SonicWall SMA100
- SonicWall SMA100
- Memory corruption
Not analysed yet 19 Dec 2019
CVE-2019-7481 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

SQL injection in SonicWall SMA100
- SonicWall SMA100
- SQL injection
Not analysed yet 17 Dec 2019