SonicWall SMA1000 vulnerabilities

2 known vulnerabilities in SonicWall SMA1000 from SonicWall. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SonicWall SMA1000: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-0126Jan 19, 2023SonicWallEPSS 72.7%

  Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.

• 9.8 Critical severity

  SonicWall SMA1000: Improper Access Control

  CVE-2022-22282May 13, 2022SonicWallEPSS 7.77%

  SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.