SonicWall SRA/SMA100 vulnerabilities

2 known vulnerabilities in SonicWall SRA/SMA100 from SonicWall. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SonicWall SRA/SMA100: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-22273Mar 17, 2022SonicWallEPSS 1.93%

  Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances r

• 9.8 Critical severity

  SonicWall Secure Remote Access (SRA) SQL Injection Exploited

  CVE-2021-20028Aug 4, 2021SonicWallEPSS 30.1%

  Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier