SM
VPN
SMA
On CISA KEVExploited in the wildRansomware-linked
13
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 4Low 0
Watch
Add SMA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-7483 In wildKEV | 7.5 | Dec 19 | SonicWall SMA100 Directory Traversal Vulnerability Affected: 9.0.0.3 and earlier |
| CVE-2019-7481 RansomwareIn wildKEV | 7.5 | Dec 17 | SonicWall SMA100 SQL Injection Vulnerability Affected: 9.0.0.3 and earlier |
| CVE-2023-44221 In wildKEV | 7.2 | Dec 5 | SonicWall SMA100 Appliances OS Command Injection Vulnerability Affected: 10.2.1.9-57sv and earlier versions |
| CVE-2021-20035 In wildKEV | 6.5 | Sep 27 | SonicWall SMA100 Appliances OS Command Injection Vulnerability Affected: 9.0.0.10-28sv and earlier; 10.2.0.7-34sv and earlier; 10.2.1.0-17sv and earlier |
| CVE-2025-32820 | 8.8 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance… Affected: 10.2.1.14-75sv and earlier versions |
| CVE-2025-32819 | 8.8 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting… Affected: 10.2.1.14-75sv and earlier versions |
| CVE-2024-53703 | 8.1 | Dec 5 | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause… Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2024-45318 | 8.1 | Dec 5 | A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2024-40763 | 7.5 | Dec 5 | Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2025-32821 | 7.2 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the… Affected: 10.2.1.14-75sv and earlier versions |
| CVE-2024-45319 | 6.3 | Dec 5 | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement… Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2024-53702 | 5.3 | Dec 5 | Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by… Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2025-40603 | 4.5 | Oct 31 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view… Affected: 10.2.2.2-92sv and earlier versions |
Showing 13