Sma7200 Firmware

sma7200_firmware

Vendor: Sonicwall • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-4116 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4114 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4113 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privi...Show more Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.Show less
CVE-2025-40602 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Dec 18, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2025-23006 1Sonicwall 8Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+5 more Jun 17, 2026 Jan 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentiall...Show more Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.Show less