Known vulnerabilities in SMA 100 10.2.1.4-31sv

Known vulnerabilities in SMA 100 10.2.1.4-31sv

Vendor: SonicWall

Software: SMA 100

Version: 10.2.1.4-31sv

Software CPE: cpe:2.3:h:sonicwall:sma_100:*:*:*:*:*:*:*:*

Website: https://www.sonicwall.com/

Total vulnerabilities: 17

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117876 - Information Exposure Through Log Files CVE-2025-40603	CWE-532	Low	No	No	10.2.2.3	31.10.2025	SB2025103157
#VU113186 - Unrestricted Upload of File with Dangerous Type CVE-2025-40599	CWE-434	Low	No	No	10.2.2.1-90sv	23.07.2025	SB2025072340
#VU113183 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-40598	CWE-79	Low	No	No	10.2.2.1-90sv	23.07.2025	SB2025072340
#VU113182 - Heap-based Buffer Overflow CVE-2025-40597	CWE-122	Critical	No	No	10.2.2.1-90sv	23.07.2025	SB2025072340
#VU113181 - Stack-based buffer overflow CVE-2025-40596	CWE-121	Critical	No	No	10.2.2.1-90sv	23.07.2025	SB2025072340
#VU108787 - Argument Injection or Modification CVE-2025-32821	CWE-88	Low	No	No	10.2.1.15-81sv	08.05.2025	SB2025050813
#VU108786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-32820	CWE-22	Medium	No	No	10.2.1.15-81sv	08.05.2025	SB2025050813
#VU108784 - Files or Directories Accessible to External Parties CVE-2025-32819	CWE-552	Medium	No	No	10.2.1.15-81sv	08.05.2025	SB2025050813
#VU101261 - Stack-based buffer overflow CVE-2024-53703	CWE-121	High	Public exploit available	No	10.2.1.14-75sv	05.12.2024	SB2024120511
#VU101260 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2024-53702	CWE-338	Medium	No	No	10.2.1.14-75sv	05.12.2024	SB2024120511
#VU101258 - Use of Hard-coded Credentials CVE-2024-45319	CWE-798	Medium	No	No	10.2.1.14-75sv	05.12.2024	SB2024120511
#VU101256 - Stack-based buffer overflow CVE-2024-45318	CWE-121	High	No	No	10.2.1.14-75sv	05.12.2024	SB2024120511
#VU101255 - Heap-based Buffer Overflow CVE-2024-40763	CWE-122	High	No	No	10.2.1.14-75sv	05.12.2024	SB2024120511
#VU93542 - Improper input validation CVE-2024-38475	CWE-20	Critical	Public exploit available	No	10.2.1.14-75sv	01.07.2024	SB2024070155 SB20240702144 SB2024070402 and 54 more
#VU66755 - Exposure of sensitive information to an unauthorized actor	CWE-200	Medium	No	No	10.2.1.6-37sv	25.08.2022	SB2022082507
#VU66753 - Heap-based Buffer Overflow CVE-2022-2915	CWE-122	Medium	No	No	10.2.1.6-37sv	25.08.2022	SB2022082505
#VU63353 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1703	CWE-78	Low	No	No	10.2.0.10-46sv, 10.2.1.5-34sv	18.05.2022	SB2022051802