PT-2019-18627

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.4 and earlier Description The issue allows an authenticated user to execute arbitrary code in the viewcacert CGI script due to code injection. Recommendations For SonicWall SMA100 versions 9.0.0.4 and earlier,...

PT-2019-18625

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.3 and earlier Description The issue allows for authenticated SQL injection, enabling users to gain read-only access to unauthorized resources. This is achieved through the use of the viewcacert CGI script...

CVE-2019-7484: Improper Neutralization of Special Elements used in an SQL Command

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

PT-2019-18623

Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.3 and earlier Description A stack-based buffer overflow issue allows an unauthenticated user to execute arbitrary code in the libSys.so function. Recommendations For SonicWall SMA100 versions 9.0.0.3 and earlier...

SonicWall SMA100 Path Traversal Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A path traversal vulnerability exists in the SonicWall SMA100. The vulnerability stems from a failure of a network system or product to properly filter for specific elements in a resource or file path. An attacker could...

CVE-2019-7483: Improper Limitation of a Pathname to a Restricted Directory

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server...

CVE-2019-7482: Stack-based Buffer Overflow

Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

SonicWall SMA100 Authenticated Code injection

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier. CVE: CVE-2019-7486 Last updated: March 6, 2020, 5:42 a.m...

SonicWall SMA100 Authenticated Buffer Overflow

Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7485 Last updated: March 6, 2020, 4:42 a.m...

SonicWall SMA100 Buffer Overflow Vulnerability (CNVD-2020-01638)

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A buffer overflow vulnerability exists in SonicWall SMA100 9.0.0.3 and prior versions, which originates when a network system or product performs an operation in memory without properly validating data boundaries,...

SonicWall SMA100 SQL Injection Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A SQL injection vulnerability exists in SonicWall SMA100 9.0.0.3 and earlier versions, which stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an...

SonicWall SMA100 Elevation of Privilege Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. An information disclosure vulnerability exists in SonicWall SMA100 9.0.0.3 and earlier versions. An attacker can exploit the vulnerability to gain read-only access to unauthorized resources...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

Design/Logic Flaw

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7481

SonicWall SMA100 is affected by CVE-2019-7481, an information-disclosure vulnerability that allows unauthenticated attackers to gain read-only access to unauthorized resources. The vulnerability impacts SMA100 versions up to and including 9.0.0.3 (and earlier per the CVE description). Reported CV...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7481

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier...

SonicWall SMA100 Authenticated SQL injection

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7484 Last updated: March 6, 2020, 4:42 a.m...

SonicWall SMA100 Pre-authentication stack buffer overflow

Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier. CVE: CVE-2019-7482 Last updated: March 6, 2020, 4:42 a.m...