← Back

Sma 500v

sma_500v

Vendor: Sonicwall • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Sonicwall
5Sma 200 Firmware
Sma 210 FirmwareSma 400 Firmware+2 more
Oct 31, 2025
Sep 27, 2021
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
1Sonicwall
5Sma 200 Firmware
Sma 210 FirmwareSma 400 Firmware+2 more
Nov 21, 2024
Sep 27, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
1Sonicwall
6Sma 100 Firmware
Sma 200 FirmwareSma 210 Firmware+3 more
Oct 31, 2025
Feb 4, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability imp...Show more
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.Show less