Vendor
SonicWall
221 known vulnerabilities.
Products
SonicOS 75
SMA100 26
GMS 24
SMA1000 19
Analytics 15
NetExtender 11
SonicWall SMA100 11
Email Security 11
SonicWall Global VPN Client 5
SonicOSv 5
Network Security Manager (NSM) 5
Global Management System (GMS) 5
SMA 100 Series 4
SonicWall SMA1000 4
Connect Tunnel 3
SonicWall SRA/SMA100 3
SonicWall Switch 2
SonicWall Analytics On-Prem 2
SonicWall NetExtender 2
Directory Services Connector 2
Email Security Appliance 2
SonicWall GMS 2
SonicWall Email Security 2
SonicWall NetExtender Windows (32 and 64 bit) Client 1
Capture Client 1
SonicWall NSM On-Prem 1
Global VPN Client 1
Email Security Virtual Appliance 1
GMS < 9.3.3 0
SMA 1000 Series Firmware 0
SMA 0
SMA Mobile Connect 0
SMA Connect Tunnel 0
SMA NetExtender 0
SMA 1000 0
SMA 100 0
sma100_firmware 0
sonicwall_sonicos__5.9.2.14-13o 0
sonicwall_sonicos__6.5.2.8-2n 0
sonicwall_sonicos__6.5.4.15.116n 0
221 results · Feed
-
Unscored —CVE-2021-20043 EPSS 23%
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attack…
-
Unscored —
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass …
-
Unscored —CVE-2021-20041 EPSS 21%
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100…
-
Unscored —CVE-2021-20040 EPSS 25%
A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload…
-
High 8.8
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method all…
-
Critical 9.8
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…
KEV Jan 28, 2022 -
Unscored —
A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management…
-
Medium 6.5CVE-2021-20035 Exploited
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker t…
KEV Apr 16, 2025 -
Unscored —
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversa…
-
Unscored —
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads …
-
Unscored —
SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vu…
-
Critical 9.8
Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acc…
KEV Mar 28, 2022 -
Unscored —
Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a …
-
Unscored —
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this …
-
Unscored —
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a spe…
-
Unscored —CVE-2021-20026 EPSS 12%
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection u…
-
Unscored —
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a passwor…
-
Medium 4.9
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an…
KEV Nov 3, 2021 -
Unscored —
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate pri…
-
High 7.2
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …
KEV Nov 3, 2021 -
Critical 9.8
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…
KEV Nov 3, 2021 -
Unscored —
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the speci…
-
Unscored —
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS…
-
Unscored —CVE-2020-5148 Public exploit
SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing …
-
Critical 9.8
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…
KEV Nov 3, 2021 -
Unscored —CVE-2020-5147 Public exploit
SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to…
-
Unscored —
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection us…
-
Unscored —
SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to S…
-
Unscored —
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerabil…
-
Unscored —
SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator usernam…
-
Unscored —
A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the fire…
-
Unscored —CVE-2020-5142 Public exploit
A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated …
-
Unscored —
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SS…
-
Unscored —
A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) …
-
Unscored —
A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due…
-
Unscored —
A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on…
-
Unscored —
A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL…
-
Unscored —
A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a fir…
-
Critical 9.8
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…
KEV Mar 15, 2022 -
Unscored —
A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, …