Multiple vulnerabilities in SonicWall SMA 100 series (FIXED)

Overview In April of 2025, Rapid7 discovered and disclosed three new vulnerabilities affecting SonicWall Secure Mobile Access “SMA” 100 series appliances SMA 200, 210, 400, 410, 500v. These vulnerabilities are tracked as CVE-2025-32819, CVE-2025-32820, and CVE-2025-32821. An attacker with access ...

CVE-2025-32819

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

CVE-2025-32819

creationtimestamp| type| source ---|---|--- 2025-05-07 17:44:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114467788999930682 2025-05-07 18:41:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lom2f5pozb22 2025-05-07 21:17:48+00:00| seen|...

CVE-2025-32819

A path traversal vulnerability exists in the SonicWall SMA100 series network firewall microprogramming software. A remote authenticated attacker with SSLVPN user privileges can bypass path-traversal checks to delete arbitrary files. This may lead to the system being reset to factory default setti...