SMA100 at a glance
1 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 1 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 3 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 5 | 0 |
Latest advisories
-
High max 8.8NCSC-2025-0145 3 CVEs
Kwetsbaarheden verholpen in SonicWall SMA100
SonicWall heeft kwetsbaarheden verholpen in de SMA100 serie.
-
High max 9.1
Kwetsbaarheden verholpen in SonicWall SMA100 SSLVPN
SonicWall heeft kwetsbaarheden verholpen in de SMA100 SSLVPN (Specifiek voor firmware versies 10.2.1.13-72sv en eerder).
26 results · Feed
-
Medium 4.5
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, au…
-
High 7.1CVE-2025-32821 EPSS 23%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges…
-
High 8.3
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversa…
-
High 8.8
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path travers…
-
High 8.1
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded b…
-
Medium 5.3
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup…
-
Medium 6.3
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticat…
-
High 8.1
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based bu…
-
High 7.5
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote au…
-
Medium 6.3
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specifi…
-
Unscored —
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an…
-
High 7.2
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated at…
KEV May 1, 2025 -
Unscored —
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to …
-
Unscored —CVE-2022-1703 EPSS 13%
Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote…
-
Medium 6.5CVE-2021-20035 Exploited
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker t…
KEV Apr 16, 2025 -
Unscored —
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversa…
-
Unscored —
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the speci…
-
Unscored —
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS…
-
Unscored —
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection us…
-
Unscored —
SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as …
-
Unscored —
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using vie…
-
Unscored —
Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. Thi…
-
Unscored —
Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. T…
-
Unscored —CVE-2019-7482 Public exploit
Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function li…
-
High 7.5CVE-2019-7483 Exploited
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user …
KEV Mar 28, 2022 -
High 7.5
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This v…
KEV Nov 3, 2021