Sma 100 Firmware Security Vulnerabilities and Issues — Sma 100 Firmware CVE List

Lucene search

SonicwallSma 100 Firmware

4 matches found

CVE•added 2021/02/04 6:15 a.m.•1340 views

CVE-2021-20016

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

9.8CVSS9.6AI score0.80445EPSS

CVE•added 2021/01/09 1:15 a.m.•93 views

CVE-2020-5146

A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.

9CVSS7.1AI score0.01782EPSS

CVE•added 2021/12/23 2:15 a.m.•48 views

CVE-2021-20049

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.

7.5CVSS7.6AI score0.00453EPSS

CVE•added 2021/12/23 2:15 a.m.•47 views

CVE-2021-20050

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.

7.5CVSS7.9AI score0.00217EPSS