Sql injection

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

Buffer overflow

Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

Stack overflow

Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

Code injection

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier...

CVE-2019-7485

Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7484

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7486

CVE-2019-7486 describes a code injection vulnerability in SonicWall SMA100 where an authenticated user can execute arbitrary code via the viewcacert CGI script. Affected: SMA100 versions 9.0.0.4 and earlier. The issue enables remote or local? The provided documents specify that exploitation requi...

CVE-2019-7485

CVE-2019-7485 affects the SonicWall SMA100 appliance (firmware versions up to 9.0.0.3). The root cause is a buffer overflow in the DEARegister CGI script , exploitable by an authenticated user to execute arbitrary code on the device . Affected product: SMA100; impact includes potential control ov...

CVE-2019-7484

CVE-2019-7484 is an authenticated SQL injection in SonicWall SMA100 via the viewcacert CGI script. Affected product: SonicWall SMA100 hardware/software with SMA100 firmware versions up to 9.0.0.3 (and earlier). Root cause: insufficient input validation on SQL statements used by the viewcacert CGI...

CVE-2019-7486

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier...

CVE-2019-7482

CVE-2019-7482 : A stack-based buffer overflow in SonicWall SMA100’s libSys.so allows an unauthenticated user to execute arbitrary code. Affected are SMA100 devices on version 9.0.0.3 and earlier. The connected documents confirm the root cause as a buffer overflow and identify the affected product...

CVE-2019-7483

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server...

CVE-2019-7483

SonicWall SMA100 is affected by CVE-2019-7483: an unauthenticated Directory Traversal in the handleWAFRedirect CGI that can reveal file presence on the server. The affected product is SonicWall SMA100; evidence across multiple sources consistently describes directory traversal affecting unauthent...

CVE-2019-7482

Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...

CVE-2019-7483

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server...

SonicWall SonicOS SSLVPN NACagent Code Issue Vulnerability

SonicWall SonicOS SSLVPN NACagent is a VPN Virtual Private Network client application from SonicWall USA. A code issue vulnerability exists in SonicOS SSLVPN NACagent version 3.5 Windows. An attacker can exploit this vulnerability to execute code with the help of a malicious binary...

CVE-2019-7483

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2019-18624 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 affected versions not specified Description: The issue is related to an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI, which allows users to test for the presence of a file on the server...

SonicWall SMA100 Buffer Overflow Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A buffer overflow vulnerability exists in the SonicWall SMA100. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

SonicWall SMA100 Path Traversal Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A path traversal vulnerability exists in the SonicWall SMA100. The vulnerability stems from a failure of a network system or product to properly filter for specific elements in a resource or file path. An attacker could...