Sma 500v vulnerabilities

2 known vulnerabilities in Sma 500v from SonicWall. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.5 Medium severity

  SonicWall SMA100 Appliances OS Command Injection Exploited

  CVE-2021-20035Sep 27, 2021SonicWallEPSS 4.41%

  Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

• 9.8 Critical severity

  SonicWall SSLVPN SMA100 SQL Injection Exploited

  CVE-2021-20016Feb 4, 2021SonicWallEPSS 40%

  A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.