Sma1000 Firmware vulnerabilities

3 known vulnerabilities in Sma1000 Firmware from SonicWall. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  SMA1000: Server-Side Request Forgery

  CVE-2025-2170Apr 30, 2025SonicWall

  A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintend

• 7.5 High severity

  SonicWall SMA1000: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-0126Jan 19, 2023SonicWallEPSS 72.7%

  Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.

• 7.8 High severity

  Linux Kernel Privilege Escalation Exploited

  CVE-2022-0847Mar 10, 2022KernelEPSS 92.8%

  A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use th