SonicWall SMA100 at a glance
2 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
11 results · Feed
-
Unscored —
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being access…
-
Unscored —
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 user…
-
Unscored —CVE-2021-20045 EPSS 25%
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated …
-
Unscored —CVE-2021-20044 EPSS 40%
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker…
-
Unscored —CVE-2021-20043 EPSS 23%
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attack…
-
Unscored —
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass …
-
Unscored —CVE-2021-20041 EPSS 21%
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100…
-
Unscored —CVE-2021-20040 EPSS 25%
A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload…
-
High 8.8
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method all…
-
Critical 9.8
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…
KEV Jan 28, 2022 -
Critical 9.8
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…
KEV Nov 3, 2021