Vendor

SonicWall

221 known vulnerabilities.

Products

SonicOS 75 SMA100 26 GMS 24 SMA1000 19 Analytics 15 NetExtender 11 SonicWall SMA100 11 Email Security 11 SonicWall Global VPN Client 5 SonicOSv 5 Network Security Manager (NSM) 5 Global Management System (GMS) 5 SMA 100 Series 4 SonicWall SMA1000 4 Connect Tunnel 3 SonicWall SRA/SMA100 3 SonicWall Switch 2 SonicWall Analytics On-Prem 2 SonicWall NetExtender 2 Directory Services Connector 2 Email Security Appliance 2 SonicWall GMS 2 SonicWall Email Security 2 SonicWall NetExtender Windows (32 and 64 bit) Client 1 Capture Client 1 SonicWall NSM On-Prem 1 Global VPN Client 1 Email Security Virtual Appliance 1 GMS < 9.3.3 0 SMA 1000 Series Firmware 0 SMA 0 SMA Mobile Connect 0 SMA Connect Tunnel 0 SMA NetExtender 0 SMA 1000 0 SMA 100 0 sma100_firmware 0 sonicwall_sonicos__5.9.2.14-13o 0 sonicwall_sonicos__6.5.2.8-2n 0 sonicwall_sonicos__6.5.4.15.116n 0

All Critical High Medium Low Exploited only Public exploit

221 results · Feed

High 7.5

CVE-2023-34133 Public exploit Scanner template EPSS 73%

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34132 Public exploit

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-th…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34131

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unau…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34130

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34129 EPSS 41%

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analy…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34128

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS:…

SonicWall GMS Analytics Network devices

Jul 13, 2023
High 8.8

CVE-2023-34127 Public exploit EPSS 86%

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall G…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34126

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesys…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34125 EPSS 24%

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the und…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Critical 9.8

CVE-2023-34124 Public exploit Scanner template EPSS 50%

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Unscored —

CVE-2023-34123

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-…

SonicWall GMS Analytics Network devices

Jul 12, 2023
Unscored —

CVE-2023-0656 Public exploit EPSS 41%

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of …

SonicWall SonicOS Network devices

Mar 2, 2023
High 8.8

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exc…

SonicWall SonicOS Network devices

Mar 2, 2023
Medium 5.3

CVE-2023-0655

SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an erro…

SonicWall SonicWall Email Security Network devices

Feb 14, 2023
High 7.5

CVE-2023-0126 Scanner template EPSS 73%

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated att…

SonicWall SonicWall SMA1000 Network devices

Jan 19, 2023
High 7.5

CVE-2021-20030

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web…

SonicWall SonicWall GMS Network devices

Oct 13, 2022
Unscored —

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to …

SonicWall SMA100 Network devices

Aug 26, 2022
Unscored —

CVE-2022-2324

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture A…

SonicWall SonicWall Email Security Network devices

Jul 29, 2022
Unscored —

CVE-2022-22280

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerabili…

SonicWall SonicWall Analytics On-Prem SonicWall GMS Network devices

Jul 29, 2022
Unscored —

CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remo…

SonicWall SonicWall Switch Network devices

Jul 29, 2022
Unscored —

CVE-2022-1703 EPSS 13%

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote…

SonicWall SMA100 Network devices

Jun 3, 2022
Unscored —

CVE-2022-22282

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource …

SonicWall SonicWall SMA1000 Network devices

May 13, 2022
Unscored —

CVE-2022-22281

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and ear…

SonicWall SonicWall NetExtender Windows (32 and 64 bit) Client Windows Network devices

May 13, 2022
Unscored —

CVE-2022-1702

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifi…

SonicWall SonicWall SMA1000 Network devices

May 13, 2022
Unscored —

CVE-2022-1701

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key…

SonicWall SonicWall SMA1000 Network devices

May 13, 2022
Unscored —

CVE-2021-20051

SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hija…

SonicWall SonicWall Global VPN Client Network devices

May 4, 2022
Unscored —

CVE-2022-22278

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the s…

SonicWall SonicOS Network devices

Apr 27, 2022
Unscored —

CVE-2022-22277

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.

SonicWall SonicOS Network devices

Apr 27, 2022
Unscored —

CVE-2022-22276

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user.

SonicWall SonicOS Network devices

Apr 27, 2022
Unscored —

CVE-2022-22275

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy u…

SonicWall SonicOS Network devices

Apr 27, 2022
Unscored —

CVE-2022-22279

A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and o…

SonicWall SonicWall SRA/SMA100 Network devices

Apr 13, 2022
Unscored —

CVE-2022-22274 Public exploit EPSS 76%

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to…

SonicWall SonicOS Network devices

Mar 25, 2022
Unscored —

CVE-2022-22273

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure …

SonicWall SonicWall SRA/SMA100 Network devices

Mar 17, 2022
Unscored —

CVE-2021-20048

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to c…

SonicWall SonicOS Network devices

Jan 7, 2022
Unscored —

CVE-2021-20046

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker…

SonicWall SonicOS Network devices

Jan 7, 2022
Unscored —

CVE-2021-20050

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being access…

SonicWall SonicWall SMA100 Network devices

Dec 23, 2021
Unscored —

CVE-2021-20049

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 user…

SonicWall SonicWall SMA100 Network devices

Dec 23, 2021
Unscored —

CVE-2021-20047

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerabil…

SonicWall SonicWall Global VPN Client Network devices

Dec 8, 2021
Unscored —

CVE-2021-20045 EPSS 25%

A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated …

SonicWall SonicWall SMA100 Network devices

Dec 8, 2021
Unscored —

CVE-2021-20044 EPSS 40%

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker…

SonicWall SonicWall SMA100 Network devices

Dec 8, 2021

SonicWall

Products

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and…

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-th…

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unau…

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data…

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analy…

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS:…

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall G…

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesys…

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the und…

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-…

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of …

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exc…

SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an erro…

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated att…

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web…

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to …

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture A…

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerabili…

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remo…

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote…

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource …

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and ear…

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifi…

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key…

SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hija…

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the s…

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext.

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user.

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy u…

A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and o…

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to…

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure …

A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to c…

A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker…

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being access…

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 user…

SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerabil…

A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated …

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker…