Known vulnerabilities in SMA 100 - page 2

Vendor: SonicWall
Software: SMA 100
Software CPE: cpe:2.3:h:sonicwall:sma_100:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 42
Public exploits: 6
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SMA 100 SMA 100 is affected by 42 known vulnerabilities: 6 critical, 11 high, 16 medium, 9 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-22279		 CWE-22 Medium
No
Exploited
 9.0.0.10-28sv 13.04.2022 SB2022041324
SB2022041325
#VU62294 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-20028		 CWE-89 High
No
Exploited
 9.0.0.10-28sv, 10.2.0.7-34sv 13.04.2022 SB2021080411
SB2021080412
#VU61610 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-22273		 CWE-78 Medium
No
No
 9.0.0.10-28sv 24.03.2022 SB2022032427
#VU59079 - Observable Response Discrepancy
CVE-2021-20049		 CWE-204 Low
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 21.12.2021 SB2021122102
#VU59078 - Improper Access Control
CVE-2021-20050		 CWE-284 Medium
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 21.12.2021 SB2021122102
#VU58626 - Heap-based Buffer Overflow
CVE-2021-20045		 CWE-122 Critical
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58625 - Improper Access Control
CVE-2021-20044		 CWE-284 Medium
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58624 - Heap-based Buffer Overflow
CVE-2021-20043		 CWE-122 High
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58623 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2021-20042		 CWE-441 High
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58622 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-20041		 CWE-835 Medium
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58621 - Unrestricted Upload of File with Dangerous Type
CVE-2021-20040		 CWE-434 High
No
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58620 - Command injection
CVE-2021-20039		 CWE-77 High
Available
No
 10.2.0.9-41sv, 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU58619 - Stack-based buffer overflow
CVE-2021-20038		 CWE-121 Critical
Available
Exploited
 10.2.1.3-27sv 07.12.2021 SB2021120713
#VU56856 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv 24.09.2021 SB2021092408
#VU56853 - Improper Access Control
CVE-2021-20034		 CWE-284 High
Available
No
 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv 24.09.2021 SB2021092406
#VU56851 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20035		 CWE-78 Low
No
Exploited
 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv 24.09.2021 SB2021092405
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Available
No
 10.2.1.0-17sv 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 10.2.1.0-17sv 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU51440 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20018		 CWE-200 Medium
No
No
 10.2.0.6-31sv 13.03.2021 SB2021031302
#VU51439 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20017		 CWE-78 High
No
No
 10.2.0.6-31sv 13.03.2021 SB2021031302


Showing elements 21 - 40 out of 42