SONICWALL SMA100 SSL-VPN Security Vulnerability

The SonicWALL SMA100 is a secure access gateway device from SonicWALL USA. A security vulnerability exists in the SONICWALL SMA100 SSL-VPN that stems from improper neutralization of special elements...

CVE-2023-44221: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...

CVE-2023-5970: Improper Authentication

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

SonicWALL SSL-VPN SMA100 series Security Vulnerability

The SonicWALL SSL-VPN SMA100 series is SonicWALL's for secure remote connectivity. A series of VPN connectivity solutions. A security vulnerability exists in the SonicWALL SSL-VPN SMA100 series that stems from incorrect authentication and allows a remote attacker to create the same external domai...

CVE-2023-44221

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a ‘nobody’ user, potentially leading to OS Command Injection Vulnerability. Recent assessments: Assessed...

SonicWall SSL-VPN SMA100 Version 10.x Is Affected By Multiple Vulnerabilities

1 CVE-2023-44221 - Post Authentication OS Command Injection VulnerabilityImproper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading...

PT-2023-9076

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions prior to 10.2.1.10-62sv Description The issue is related to the improper neutralization of special elements in the SMA100 SSL-VPN management interface, allowing a remote authenticated attacker with administrative...

SonicWall SMA100 Directory Traversal Vulnerability (SNWLID-2019-0018)

The version of SonicWall SMA100 installed on the remote host is prior 9.0.0.4. It is, therefore, affected by a directory traversal vulnerability. In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a fi...

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

Heap overflow

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

CVE-2022-2915

CVE-2022-2915 is a heap-based buffer overflow in SonicWall SMA100 firmware that affects 10.2.1.5-34sv and earlier. An authenticated remote attacker can cause DoS and potentially code execution. Remediation: upgrade to SMA100 10.2.1.6-37sv or later as noted by SonicWall advisories; exploitation st...

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

SonicWALL SMA100 缓冲区错误漏洞

The SonicWALL SMA100 is a secure access gateway appliance from SonicWALL, Inc. A buffer error vulnerability exists in the SonicWALL SMA100 10.2.1.5-34sv and earlier, which originates when a remote authentication attacker exploits a heap-based buffer overflow to cause a denial of service or code...

CVE-2022-2915: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

SMA100 Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the SonicWall SMA100 appliance could potentially expose sensitive information i.e., third-party packages and library versions used in the appliance firmware to a pre-authenticated actor.IMPORTANT: SMA 1000 series products are not affected by this vulnerability. CVE: None Last...

SonicWall SMA100 Post-Auth Heap-based Buffer Overflow Vulnerability

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.IMPORTANT: SMA 1000 series...

PT-2022-4452 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions 10.2.1.5-34sv and earlier Description: The issue is caused by a heap-based buffer overflow in the dynamic memory of SonicWall SMA100 appliances. This can be exploited by a remote attacker to potentially execute...

SonicWall SMA100 Multiple Vulnerabilities (CVE-2019-7484; CVE-2019-7485)

Multiple vulnerabilities exist in SonicWall SMA100. Successful exploitation of these vulnerabilities would allow a remote attacker to execute arbitrary commands on the affected system...