S5
Product
Sma 500v Firmware
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 19Medium 6Low 0
Watch
Add Sma 500v Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45319 | 6.3 | Dec 5 | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement… Affected: before 10.2.1.14-75sv |
| CVE-2024-22395 | 6.3 | Feb 24 | Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated… Affected: before 10.2.1.11-65sv |
| CVE-2025-40598 | 6.1 | Jul 23 | A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary… Affected: before 10.2.2.1-90sv |
| CVE-2024-53702 | 5.3 | Dec 5 | Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by… Affected: before 10.2.1.14-75sv |
| CVE-2022-22279 | 4.9 | Apr 13 | A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100… Affected: before 9.0.0.10-28sv |
| CVE-2025-40603 | 4.5 | Oct 31 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view… Affected: before 10.2.2.3 |
Showing 6