Sma7210 Firmware

sma7210_firmware

Vendor: Sonicwall • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-15410 1Sonicwall 3Sma6210 Firmware Sma7210 FirmwareSma8200v Jul 16, 2026 Jul 14, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a re...Show more Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.Show less
CVE-2026-15409 1Sonicwall 3Sma6210 Firmware Sma7210 FirmwareSma8200v Jul 16, 2026 Jul 14, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended...Show more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.Show less
CVE-2026-4116 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4114 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4113 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privi...Show more Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.Show less
CVE-2025-40602 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Dec 18, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2025-23006 1Sonicwall 8Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+5 more Jun 17, 2026 Jan 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentiall...Show more Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.Show less