S2
Product
Sma 200 Firmware
On CISA KEVExploited in the wildRansomware-linked
27
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 16Medium 4Low 0
Watch
Add Sma 200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20038 RansomwareIn wildKEV | 9.8 | Dec 8 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Affected: 10.2.0.8-37sv; 10.2.1.1-19sv; 10.2.1.2-24sv |
| CVE-2021-20016 RansomwareIn wildKEV | 9.8 | Feb 3 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability Affected: All versions, or not specified |
| CVE-2024-38475 In wildKEV | 9.1 | Jul 1 | Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. Affected: before 10.2.1.14-75sv |
| CVE-2022-22273 | 9.8 | Mar 17 | Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of… Affected: through 9.0.0.9-26sv |
| CVE-2021-20045 | 9.8 | Dec 8 | A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in… Affected: 10.2.0.8-37sv; 10.2.1.1-19sv |
| CVE-2021-20042 | 9.8 | Dec 8 | An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules Affected: 9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv |
| CVE-2021-20034 | 9.1 | Sep 27 | An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting… Affected: through 9.0.0.10-28sv; 10.2.0.0 through 10.2.0.7-34sv; 10.2.1.0 through 10.2.1.0-17sv |
Showing 7