CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SMA100 SSL-VPN Management Interface Remote Command Injection Vulnerability (CVE-2023-44221) Analysis and Mitigation Guide
[Affected Scope] SonicWall SMA100 series (SMA 200, 210, 400, 410, 500v) running firmware versions 10.2.1.11-63sv and below.
[Impact] A remote authenticated attacker with administrative privileges can inject arbitrary OS commands via the management interface, executing them with 'nobody' user privileges.
[Mitigation] Immediately upgrade the SMA100 firmware to the patched version (10.2.1.12-65sv or higher) and restrict access to the management interface.
SonicWall SMA 100 Management Interface Remote Command Injection Vulnerability (CVE-2021-20035) Analysis and Mitigation Guide
[Affected Scope] SonicWall SMA 100 series firmware versions 10.2.1.1-29sv and earlier, 10.2.0.8-37sv and earlier, and 9.0.0.11-31sv and earlier
[Impact] A remote authenticated attacker can inject arbitrary commands via the management interface, executing code as the 'nobody' user and potentially causing a Denial of Service (DoS)
[Mitigation] Immediately upgrade the SMA 100 firmware to the latest patched versions (e.g., 10.2.1.2-34sv or higher) as recommended by the vendor
SonicWall SMA100 SSL-VPN SQL Injection and Credential Theft Vulnerability (CVE-2021-20016) Security Advisory
[Affected Scope] SonicWall SMA100 appliances running firmware build version 10.x
[Impact] Unauthenticated remote attackers can execute arbitrary SQL queries to retrieve usernames, passwords, and active session information, leading to complete device compromise
[Mitigation] Immediately upgrade the SMA100 firmware to version 10.2.0.5 or higher to apply official security patches
SonicWall SMA100 handleWAFRedirect CGI Unauthenticated Directory Traversal (CVE-2019-7483) Analysis and Mitigation Guide
[Affected Scope] SonicWall SMA100 series firmware versions 9.0.0.3-17sv and prior
[Impact] Unauthenticated remote attackers can exploit directory traversal to test for the presence of arbitrary files on the server, mapping out sensitive system structures
[Mitigation] Immediately upgrade the SMA100 firmware to the latest secure version (9.0.0.4 or higher) as recommended by SonicWall
SonicWall SMA100 SQL Injection and Unauthorized Information Disclosure Vulnerability (CVE-2019-7481) Security Advisory
[Affected Scope] SonicWall SMA100 firmware version 9.0.0.3 and earlier
[Impact] Unauthenticated remote attackers can exploit a SQL injection vulnerability to gain unauthorized read-only access to sensitive database resources and system information
[Mitigation] Immediately upgrade the SMA100 firmware to a patched version (9.0.0.4 or later)