S5
Product
Sma 500v Firmware
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 19Medium 6Low 0
Watch
Add Sma 500v Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20038 RansomwareIn wildKEV | 9.8 | Dec 8 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Affected: 10.2.0.8-37sv; 10.2.1.1-19sv; 10.2.1.2-24sv |
| CVE-2021-20028 RansomwareIn wildKEV | 9.8 | Aug 4 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability Affected: 8.0.0.0 before 9.0.0.10-28sv |
| CVE-2024-38475 In wildKEV | 9.1 | Jul 1 | Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. Affected: before 10.2.1.14-75sv |
| CVE-2022-22273 | 9.8 | Mar 17 | Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of… Affected: through 9.0.0.9-26sv |
| CVE-2021-20045 | 9.8 | Dec 8 | A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in… Affected: 10.2.0.8-37sv; 10.2.1.1-19sv |
| CVE-2021-20042 | 9.8 | Dec 8 | An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules Affected: 9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv |
| CVE-2025-40599 | 9.1 | Jul 23 | An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface Affected: before 10.2.2.1-90sv |
Showing 7