sonicwall Vulnerability Advisory Catalog

Total 208 security vulnerabilities recorded for sonicwall software and firmware.

← Back to All Vendors
Component: sma_500v_firmware

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS)...

๐Ÿ“… 2025-07-23
CVSS 7.5 Dossier →
Component: sma_500v_firmware

A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS...

๐Ÿ“… 2025-07-23
CVSS 7.3 Dossier →
CVE-2025-40599 CRITICAL
Component: sma_210_firmware

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative priv...

๐Ÿ“… 2025-07-23
CVSS 9.1 Dossier →
Component: sma_100_firmware

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command argum...

๐Ÿ“… 2025-05-07
CVSS 7.2 Dossier →
Component: sma_100_firmware

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any director...

๐Ÿ“… 2025-05-07
CVSS 8.8 Dossier →
Component: sma_100_firmware

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitra...

๐Ÿ“… 2025-05-07
CVSS 8.8 Dossier →
Component: sma1000_firmware

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions cou...

๐Ÿ“… 2025-04-30
CVSS 7.2 Dossier →
CVE-2025-23006 CRITICAL
Component: sma8200v

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central M...

๐Ÿ“… 2025-01-23
CVSS 9.8 Dossier →
CVE-2024-53704 CRITICAL
Component: sonicos

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication....

๐Ÿ“… 2025-01-09
CVSS 9.8 Dossier →
Component: sma_200_firmware

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows ...

๐Ÿ“… 2024-12-05
CVSS 8.1 Dossier →
Component: sma_200_firmware

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certai...

๐Ÿ“… 2024-12-05
CVSS 5.3 Dossier →
Component: sma_200_firmware

A vulnerability in the SonicWall SMA100 SSLVPN firmwareย 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent th...

๐Ÿ“… 2024-12-05
CVSS 6.3 Dossier →
Component: sma_200_firmware

A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially l...

๐Ÿ“… 2024-12-05
CVSS 8.1 Dossier →
Component: sma_200_firmware

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause ...

๐Ÿ“… 2024-12-05
CVSS 7.5 Dossier →
CVE-2024-40766 CRITICAL
Component: sonicos

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource ...

๐Ÿ“… 2024-08-23
CVSS 9.8 Dossier →
Component: sonicos

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS)....

๐Ÿ“… 2024-07-18
CVSS 7.5 Dossier →
Component: netextender

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execut...

๐Ÿ“… 2024-07-18
CVSS 8.8 Dossier →
Component: sma_6200_firmware

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals ...

๐Ÿ“… 2024-07-01
CVSS 8.1 Dossier →
Component: sonicos

Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy fu...

๐Ÿ“… 2024-06-20
CVSS 6.5 Dossier →
Component: sonicos

Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via ssca...

๐Ÿ“… 2024-06-20
CVSS 7.5 Dossier →
Component: sma_200_firmware

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially ...

๐Ÿ“… 2024-02-24
CVSS 6.3 Dossier →
CVE-2024-22394 CRITICAL
Component: sonicos

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote a...

๐Ÿ“… 2024-02-08
CVSS 9.8 Dossier →
CVE-2023-6340 MEDIUM
Component: capture_client

SonicWall Capture Client version 3.7.10,ย NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The drive...

๐Ÿ“… 2024-01-18
CVSS 5.5 Dossier →
Component: sma_200_firmware

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user...

๐Ÿ“… 2023-12-05
CVSS 8.8 Dossier →
Page 2 of 9 (208 Total Records)