Known vulnerabilities in SMA 100 10.2.0.8-37sv

Vendor: SonicWall
Software: SMA 100
Version: 10.2.0.8-37sv
Software CPE: cpe:2.3:h:sonicwall:sma_100:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 20
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SMA 100 version 10.2.0.8-37sv SMA 100 10.2.0.8-37sv is affected by 20 vulnerabilities: 3 critical, 4 high, 7 medium, 6 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117876 - Information Exposure Through Log Files
CVE-2025-40603		 CWE-532 Low
No
No
 10.2.2.3 31.10.2025 SB2025103157
#VU113186 - Unrestricted Upload of File with Dangerous Type
CVE-2025-40599		 CWE-434 Low
No
No
 10.2.2.1-90sv 23.07.2025 SB2025072340
#VU113183 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-40598		 CWE-79 Low
No
No
 10.2.2.1-90sv 23.07.2025 SB2025072340
#VU113182 - Heap-based Buffer Overflow
CVE-2025-40597		 CWE-122 Critical
No
No
 10.2.2.1-90sv 23.07.2025 SB2025072340
#VU113181 - Stack-based buffer overflow
CVE-2025-40596		 CWE-121 Critical
No
No
 10.2.2.1-90sv 23.07.2025 SB2025072340
#VU108787 - Argument Injection or Modification
CVE-2025-32821		 CWE-88 Low
No
No
 10.2.1.15-81sv 08.05.2025 SB2025050813
#VU108786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-32820		 CWE-22 Medium
No
No
 10.2.1.15-81sv 08.05.2025 SB2025050813
#VU108784 - Files or Directories Accessible to External Parties
CVE-2025-32819		 CWE-552 Medium
No
No
 10.2.1.15-81sv 08.05.2025 SB2025050813
#VU66755 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 10.2.1.6-37sv 25.08.2022 SB2022082507
#VU66753 - Heap-based Buffer Overflow
CVE-2022-2915		 CWE-122 Medium
No
No
 10.2.1.6-37sv 25.08.2022 SB2022082505
#VU63353 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1703		 CWE-78 Low
No
No
 10.2.0.10-46sv, 10.2.1.5-34sv 18.05.2022 SB2022051802
#VU59079 - Observable Response Discrepancy
CVE-2021-20049		 CWE-204 Low
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 21.12.2021 SB2021122102
#VU59078 - Improper Access Control
CVE-2021-20050		 CWE-284 Medium
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 21.12.2021 SB2021122102
#VU58626 - Heap-based Buffer Overflow
CVE-2021-20045		 CWE-122 Critical
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58625 - Improper Access Control
CVE-2021-20044		 CWE-284 Medium
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58624 - Heap-based Buffer Overflow
CVE-2021-20043		 CWE-122 High
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58623 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2021-20042		 CWE-441 High
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58622 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-20041		 CWE-835 Medium
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58621 - Unrestricted Upload of File with Dangerous Type
CVE-2021-20040		 CWE-434 High
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58620 - Command injection
CVE-2021-20039		 CWE-77 High
Public exploit available
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713