S1
Product
Sma 100 Firmware
On CISA KEVExploited in the wildRansomware-linked
13
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 1Low 0
Watch
Add Sma 100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20016 RansomwareIn wildKEV | 9.8 | Feb 3 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability Affected: 10.0.0.0 before 10.2.0.5-d-29sv |
| CVE-2019-7483 In wildKEV | 7.5 | Dec 19 | SonicWall SMA100 Directory Traversal Vulnerability Affected: before 9.0.0.4 |
| CVE-2019-7481 RansomwareIn wildKEV | 7.5 | Dec 17 | SonicWall SMA100 SQL Injection Vulnerability Affected: before 9.0.0.4 |
| CVE-2019-7482 | 9.8 | Dec 19 | Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so Affected: through 9.0.0.3 |
| CVE-2025-32820 | 8.8 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance… Affected: before 10.2.1.15-81sv |
| CVE-2025-32819 | 8.8 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting… Affected: before 10.2.1.15-81sv |
| CVE-2019-7486 | 8.8 | Dec 19 | Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script Affected: through 9.0.0.4 |
| CVE-2019-7485 | 8.8 | Dec 19 | Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script Affected: through 9.0.0.3 |
| CVE-2021-20050 | 7.5 | Dec 23 | An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing… Affected: before 10.0.0.0; 10.2.0.8-37sv; 10.2.1.2-24sv |
| CVE-2021-20049 | 7.5 | Dec 23 | A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses Affected: before 10.0.0.0; 10.2.0.8-37sv; 10.2.1.2-24sv |
| CVE-2025-32821 | 7.2 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the… Affected: before 10.2.1.15-81sv |
| CVE-2020-5146 | 7.2 | Jan 9 | A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters Affected: through 10.2.0.2-20sv |
| CVE-2019-7484 | 6.5 | Dec 19 | Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script Affected: through 9.0.0.3 |
Showing 13