2094 matches found
Vulnerabilities fixed in SonicWall SMA100 series
Vulnerabilities have been fixed in SonicWall SMA100. The vulnerabilities with the attribute CVE-2021-20038 and CVE-2021-20045 have received a CVSSv3 score of 9.8 and 9.4 and allow an unauthenticated remote malicious person potentially able to execute code execute code on the system. The...
SonicWall Global VPN client 代码问题漏洞
Sonicwall SonicWall Global VPN client is a Vpn software from SonicWall USA that works with the SonicWALL firewall. The software enables remote employees and vendors to access the company's network. A code issue vulnerability exists in SonicWall Global VPN client version 4.10.6 and prior versions,...
PT-2021-13741 · Sonicwall · Sma100 +5
Name of the Vulnerable Software and Affected Versions: SMA100 sonicfiles versions affected versions not specified SMA 200 SMA 210 SMA 400 SMA 410 SMA 500v Description: A buffer overflow vulnerability in the RAC COPY TO method, specifically with RacNumber 36, allows a remote unauthenticated attack...
SonicWall Releases Security Advisory for SMA 100 Series Appliances
SonicWall has released a security advisory to address vulnerabilities affecting SonicWall Secure Mobile Access SMA 100 series appliances. A remote attacker could exploit these vulnerabilities to take control of an affected system. SMA 100 series appliances provide an organization’s employees with...
SonicWall patches multiple SMA100 affected vulnerabilities
SonicWall has verified and patched vulnerabilities of critical and medium severity CVSS 5.3-9.8 in SMA 100 series appliances, which include SMA 200, 210, 400, 410 and 500v products. SMA 100 series appliances with WAF enabled are also impacted by the majority of these vulnerabilities.SonicWall...
Sonicwall SMA100 操作系统操作系统命令注入漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. An operating system command injection vulnerability exists in the SonicWall SMA100 management interface, which stems from an improper neutralization of special elements in the POST http method of /cgi-bin/viewcert. The...
SonicWall SMA100 安全漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. A security vulnerability exists in the SonicWall SMA100 sonicfiles RACCOPYTO RacNumber 36 method that allows an unauthenticated, remote attacker to potentially execute code as the nobody user in the device. The...
Sonicwall SMA100 操作系统命令注入漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. An operating system command injection vulnerability exists in the SonicWall SMA100 that could allow a remote authentication attacker to execute operating system system commands in the device. The vulnerability affects SMA...
SonicWall SMA100 安全漏洞
The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A security vulnerability exists in the SonicWall SMA100 that could be exploited by an unauthenticated remote attacker to bypass firewall rules by using the SMA100 as an unexpected proxy or intermediate undetectable pro...
Sonicwall SMA100 缓冲区错误漏洞
The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A buffer error vulnerability in the modcgi module environment variable of the SonicWall SMA100 Apache httpd server allows an unauthenticated, remote attacker to potentially execute code as the nobody user in the device...
PT-2021-5651 · Apache +1 · Apache Http Server +6
Name of the Vulnerable Software and Affected Versions: SonicWall SMA 100 Appliances version 10.2.0.8-37sv SonicWall SMA 100 Appliances version 10.2.1.1-19sv SonicWall SMA 100 Appliances version 10.2.1.2-24sv SonicWall SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19s...
Sonicwall SMA100 缓冲区错误漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A security vulnerability exists in the SonicWall SMA100 getBookmarks method that allows a remote authenticated attacker to execute code as the nobody user in the device. The vulnerability affects SMA 200, 210, 400, 410, an...
SonicWall SMA100安全漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A security vulnerability exists in the SonicWall SMA100 where a crafted HTTP request sent to /fileshare/sonicfiles/sonicfiles results in a loop with an inaccessible exit condition so that an unauthenticated, remote attacke...
Sonicwall SMA100 路径遍历漏洞
The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. A path traversal vulnerability exists in the SonicWall SMA100 upload feature that allows an unauthenticated, remote attacker to upload a crafted web page or file as the nobody user. The vulnerability affects SMA 200, 210,...
VulnCheck KEV: CVE-2019-7481
SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...
SonicWall Email Security Improper Privilege Management Vulnerability
SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-200...
SonicWall Email Security Path Traversal Vulnerability
SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation...
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker...
Sonicwall SonicOS 6.5.4 - (Common Name) Cross-Site Scripting Vulnerability
Exploit Title: Sonicwall SonicOS 6.5.4 - 'Common Name' Cross-Site Scripting XSS Vendor Homepage: https://www.sonicguard.com/NSV-800.asp Product & Service Introduction: =============================== The design, implementation and deployment of modern network architectures, such as virtualization...