SonicWall SMA100 vulnerabilities

2 known vulnerabilities in SonicWall SMA100 from SonicWall. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Exploited

  CVE-2021-20038Dec 8, 2021SonicWallEPSS 99.9%

  A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210,

• 9.8 Critical severity

  SonicWall SSLVPN SMA100 SQL Injection Exploited

  CVE-2021-20016Feb 4, 2021SonicWallEPSS 40%

  A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.