SM
VPN
SMA
On CISA KEVExploited in the wildRansomware-linked
15
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 5Low 0
Watch
Add SMA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20035 In wildKEV | 6.5 | Sep 27 | SonicWall SMA100 Appliances OS Command Injection Vulnerability Affected: 9.0.0.10-28sv and earlier; 10.2.0.7-34sv and earlier; 10.2.1.0-17sv and earlier |
| CVE-2024-45319 | 6.3 | Dec 5 | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement… Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2024-22395 | 6.3 | Feb 23 | Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated… Affected: 10.2.1.10-62sv and earlier versions |
| CVE-2024-53702 | 5.3 | Dec 5 | Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by… Affected: 10.2.1.13-72sv and earlier versions |
| CVE-2025-40603 | 4.5 | Oct 31 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view… Affected: 10.2.2.2-92sv and earlier versions |
Showing 5