SonicWALL Global Management System (GMS) < 9.4 Multiple Vulnerabilities (SNWLID-2024-0007)

The version of SonicWALL Global Management System GMS running on the remote host is prior to 9.4. It is, therefore, affected by multiple vulnerabilities: - The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity XXE injection, potentially resulting in the...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

PT-2026-69138

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN Client versions prior to 4.10.8.1109 Description An out-of-bounds kernel memory read exists in the SWIPsec.sys driver. This flaw allows a local attacker to trigger a system crash. Recommendations Update SonicWall Global VP...

CVE-2026-66151: Out-of-bounds Read

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2019-7476

A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...

EUVD-2007-6241

Malware in sbrugna...

EUVD-2019-17018

Malware in sbrugna...

EUVD-2021-7500

Malicious code in bioql PyPI...

CVE-2021-20037

SonicWall Global VPN Client 4.10.5 installer 32-bit and 64-bit incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier...

CVE-2021-20047

SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...

CVE-2020-5144

SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability...

SonicWALL GMS 安全漏洞

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

CVE-2023-34134

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34136

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

PT-2023-3808 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is due to improper limitation of a pathname to a restricted directory, allowing an authenticated remote attacker to traver...

PT-2023-3802 · Sonicwall · Sonicwall Gms +1

Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.2-SP1 and earlier SonicWall Analytics versions 2.5.0.4-R7 and earlier Description: The issue is caused by incorrect restriction of directory path names with limited access. This allows an authenticated attacker to...

Vulnerability fixed in SonicWall GMS and Analytics

A vulnerability has been fixed in SonicWall GMS and Analytics. The vulnerability allows an unauthenticated remote malicious person able to perform an SQL injection attack under the privileges of the application. To exploit the vulnerability, the malicious party must have access to the management...

SonicWall Global VPN Uncontrolled Search Path Code Execution

The vulnerability of the corporate VPN client SonicWall Global VPN is related to an uncontrolled search path element. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

CVE-2021-20051

SonicWall Global VPN Client 4.10.7.1117 installer 32-bit and 64-bit and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system...