2059 matches found
CVE-2021-20044
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...
CVE-2021-20044
CVE-2021-20044 is part of SonicWall SMA100–series vulnerabilities (SNWLID-2021-0026). It is a Post-Authentication Remote Command Execution affecting SMA 200, 210, 400, 410 and 500v. The RedHat/NVD/NCSC/Nessus and SonicWall advisories describe this as a post‑auth vulnerability that could allow an ...
CVE-2021-20043
CVE-2021-20043 is a Heap-based Buffer Overflow in the SonicWall SMA100 series (SMA 200, 210, 400, 410, 500v) implemented via the getBookmarks HTML5/Rac35 pathway. The root cause is an unchecked strcat usage in the getBookmarks HTML5 method, allowing a remote authenticated attacker to trigger a he...
CVE-2021-20043
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...
SonicWall Global VPN Client DLL Search Order Hijacking
SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.IMPORTANT: At the time of advisory, there is no evidence to suggest tha...
Vulnerabilities fixed in SonicWall SMA100 series
Vulnerabilities have been fixed in SonicWall SMA100. The vulnerabilities with the attribute CVE-2021-20038 and CVE-2021-20045 have received a CVSSv3 score of 9.8 and 9.4 and allow an unauthenticated remote malicious person potentially able to execute code execute code on the system. The...
SonicWall Global VPN client 代码问题漏洞
Sonicwall SonicWall Global VPN client is a Vpn software from SonicWall USA that works with the SonicWALL firewall. The software enables remote employees and vendors to access the company's network. A code issue vulnerability exists in SonicWall Global VPN client version 4.10.6 and prior versions,...
PT-2021-13741 · Sonicwall · Sma100 +5
Name of the Vulnerable Software and Affected Versions: SMA100 sonicfiles versions affected versions not specified SMA 200 SMA 210 SMA 400 SMA 410 SMA 500v Description: A buffer overflow vulnerability in the RAC COPY TO method, specifically with RacNumber 36, allows a remote unauthenticated attack...
SonicWall Releases Security Advisory for SMA 100 Series Appliances
SonicWall has released a security advisory to address vulnerabilities affecting SonicWall Secure Mobile Access SMA 100 series appliances. A remote attacker could exploit these vulnerabilities to take control of an affected system. SMA 100 series appliances provide an organization’s employees with...
SonicWall patches multiple SMA100 affected vulnerabilities
SonicWall has verified and patched vulnerabilities of critical and medium severity CVSS 5.3-9.8 in SMA 100 series appliances, which include SMA 200, 210, 400, 410 and 500v products. SMA 100 series appliances with WAF enabled are also impacted by the majority of these vulnerabilities.SonicWall...
SonicWall SMA100 安全漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. A security vulnerability exists in the SonicWall SMA100 sonicfiles RACCOPYTO RacNumber 36 method that allows an unauthenticated, remote attacker to potentially execute code as the nobody user in the device. The...
Sonicwall SMA100 操作系统操作系统命令注入漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. An operating system command injection vulnerability exists in the SonicWall SMA100 management interface, which stems from an improper neutralization of special elements in the POST http method of /cgi-bin/viewcert. The...
Sonicwall SMA100 缓冲区错误漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A security vulnerability exists in the SonicWall SMA100 getBookmarks method that allows a remote authenticated attacker to execute code as the nobody user in the device. The vulnerability affects SMA 200, 210, 400, 410, an...
Sonicwall SMA100 操作系统命令注入漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. An operating system command injection vulnerability exists in the SonicWall SMA100 that could allow a remote authentication attacker to execute operating system system commands in the device. The vulnerability affects SMA...
PT-2021-5651 · Apache +1 · Apache Http Server +6
Name of the Vulnerable Software and Affected Versions: SonicWall SMA 100 Appliances version 10.2.0.8-37sv SonicWall SMA 100 Appliances version 10.2.1.1-19sv SonicWall SMA 100 Appliances version 10.2.1.2-24sv SonicWall SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19s...
Sonicwall SMA100 缓冲区错误漏洞
The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A buffer error vulnerability in the modcgi module environment variable of the SonicWall SMA100 Apache httpd server allows an unauthenticated, remote attacker to potentially execute code as the nobody user in the device...
SonicWall SMA100 安全漏洞
The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A security vulnerability exists in the SonicWall SMA100 that could be exploited by an unauthenticated remote attacker to bypass firewall rules by using the SMA100 as an unexpected proxy or intermediate undetectable pro...
SonicWall SMA100安全漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A security vulnerability exists in the SonicWall SMA100 where a crafted HTTP request sent to /fileshare/sonicfiles/sonicfiles results in a loop with an inaccessible exit condition so that an unauthenticated, remote attacke...
Sonicwall SMA100 路径遍历漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. A path traversal vulnerability exists in the SonicWall SMA100 upload feature that allows an unauthenticated, remote attacker to upload a crafted web page or file as the nobody user. The vulnerability affects SMA 200, 210,...
