Advisories · Technology
SonicWall SMA1000.
Every CVE that names SonicWall SMA1000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Cross-site scripting in SonicWall SMA1000
- SonicWall SMA1000
- Cross-site scripting (XSS)
- CVSS 7.2 High
Path traversal in SonicWall SMA1000
- SonicWall SMA1000
- Path traversal
- CVSS 7.8 High
OS command injection in SonicWall SMA1000
- SonicWall SMA1000
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CWE-441
- CVSS 7.8 HighCritical · KEVKEV
OS command injection in SonicWall SMA1000
- SonicWall SMA1000
- Command injection
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CWE-441
- CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Code injection in SonicWall SMA1000
- SonicWall SMA1000
- Code injection
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV · ransomware
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CVSS 7.2 High
SonicWall SMA1000: Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
- SonicWall SMA1000
- CWE-176
- CVSS 6.6 Medium
SonicWall SMA1000: Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
- SonicWall SMA1000
- CWE-176
- CVSS 7.2 High
SonicWall SMA1000: An observable response discrepancy vulnerability in the SonicWall SMA1000 series…
- SonicWall SMA1000
- CWE-204
- CVSS 7.2 High
SQL injection in SonicWall SMA1000
- SonicWall SMA1000
- SQL injection
- CVSS 6.6 MediumCritical · KEVKEV
Missing authorization in SonicWall SMA1000
- SonicWall SMA1000
- Privilege escalation
- Broken access control
- CVSS 7.2 High
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Deserialization of untrusted data in SonicWall SMA1000
- SonicWall SMA1000
- Insecure deserialization
- CVSS 7.5 High
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Path traversal in SonicWall SMA1000
- SonicWall SMA1000
- Path traversal
-
Improper access control in SonicWall SMA1000
- SonicWall SMA1000
- Broken access control
-
Open redirect in SonicWall SMA1000
- SonicWall SMA1000
- Open redirect
-
Hard-coded cryptographic key in SonicWall SMA1000
- SonicWall SMA1000
- Hard-coded credentials
-
Information disclosure in SonicWall SMA100 and others
- SonicWall SMA100
- SonicWall SMA1000
- Information disclosure
-
SonicWall SMA1000: A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated…
- SonicWall SMA1000
- CWE-248