Known vulnerabilities in SMA 100 10.2.0.5-d-29sv

Vendor: SonicWall
Software: SMA 100
Version: 10.2.0.5-d-29sv
Software CPE: cpe:2.3:h:sonicwall:sma_100:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SMA 100 version 10.2.0.5-d-29sv SMA 100 10.2.0.5-d-29sv is affected by 21 vulnerabilities: 2 critical, 3 high, 8 medium, 8 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117876 - Information Exposure Through Log Files
CVE-2025-40603
CWE-532 Low
No
No
10.2.2.3 31.10.2025 SB2025103157
#VU113186 - Unrestricted Upload of File with Dangerous Type
CVE-2025-40599
CWE-434 Low
No
No
10.2.2.1-90sv 23.07.2025 SB2025072340
#VU113183 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-40598
CWE-79 Low
No
No
10.2.2.1-90sv 23.07.2025 SB2025072340
#VU113182 - Heap-based Buffer Overflow
CVE-2025-40597
CWE-122 Critical
No
No
10.2.2.1-90sv 23.07.2025 SB2025072340
#VU113181 - Stack-based buffer overflow
CVE-2025-40596
CWE-121 Critical
No
No
10.2.2.1-90sv 23.07.2025 SB2025072340
#VU108787 - Argument Injection or Modification
CVE-2025-32821
CWE-88 Low
No
No
10.2.1.15-81sv 08.05.2025 SB2025050813
#VU108786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-32820
CWE-22 Medium
No
No
10.2.1.15-81sv 08.05.2025 SB2025050813
#VU108784 - Files or Directories Accessible to External Parties
CVE-2025-32819
CWE-552 Medium
No
No
10.2.1.15-81sv 08.05.2025 SB2025050813
#VU66755 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
10.2.1.6-37sv 25.08.2022 SB2022082507
#VU66753 - Heap-based Buffer Overflow
CVE-2022-2915
CWE-122 Medium
No
No
10.2.1.6-37sv 25.08.2022 SB2022082505
#VU63353 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1703
CWE-78 Low
No
No
10.2.0.10-46sv, 10.2.1.5-34sv 18.05.2022 SB2022051802
#VU62294 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-20028
CWE-89 High
No
Exploited
9.0.0.10-28sv, 10.2.0.7-34sv 13.04.2022 SB2021080411
SB2021080412
#VU59079 - Observable Response Discrepancy
CVE-2021-20049
CWE-204 Low
No
No
10.2.0.9-41sv, 10.2.1.3-27sv 21.12.2021 SB2021122102
#VU59078 - Improper Access Control
CVE-2021-20050
CWE-284 Medium
No
No
10.2.0.9-41sv, 10.2.1.3-27sv 21.12.2021 SB2021122102
#VU56856 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv 24.09.2021 SB2021092408
#VU56853 - Improper Access Control
CVE-2021-20034
CWE-284 High
Public exploit available
No
9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv 24.09.2021 SB2021092406
#VU56851 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20035
CWE-78 Low
No
Exploited
9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv 24.09.2021 SB2021092405
#VU51733 - NULL Pointer Dereference
CVE-2021-3449
CWE-476 Medium
Public exploit available
No
10.2.1.0-17sv 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
10.2.1.0-17sv 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU51440 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20018
CWE-200 Medium
No
No
10.2.0.6-31sv 13.03.2021 SB2021031302


Showing elements 1 - 20 out of 21