sonicwall Vulnerability Advisory Catalog

Total 208 security vulnerabilities recorded for sonicwall software and firmware.

← Back to All Vendors
Component: analytics

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables...

📅 2023-07-13
CVSS 8.8 Dossier →
Component: analytics

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This ...

📅 2023-07-13
CVSS 8.8 Dossier →
Component: analytics

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root pr...

📅 2023-07-13
CVSS 6.5 Dossier →
CVE-2023-34124 CRITICAL
Component: analytics

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects G...

📅 2023-07-13
CVSS 9.8 Dossier →
Component: global_management_system

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analy...

📅 2023-07-13
CVSS 7.5 Dossier →
Component: sonicos

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes....

📅 2023-03-02
CVSS 8.8 Dossier →
Component: sonicos

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could caus...

📅 2023-03-02
CVSS 7.5 Dossier →
CVE-2023-0655 MEDIUM
Component: email_security

SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive ...

📅 2023-02-14
CVSS 5.3 Dossier →
Component: sma1000_firmware

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files...

📅 2023-01-19
CVSS 7.5 Dossier →
Component: global_management_system

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing applicati...

📅 2022-10-13
CVSS 7.5 Dossier →
Component: sma_200_firmware

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) o...

📅 2022-08-26
CVSS 8.8 Dossier →
Component: hosted_email_security

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appl...

📅 2022-07-29
CVSS 7.5 Dossier →
CVE-2022-22280 CRITICAL
Component: analytics

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3...

📅 2022-07-29
CVSS 9.8 Dossier →
Component: sws12-10fpoe_firmware

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host s...

📅 2022-07-29
CVSS 8.8 Dossier →
Component: sma_210_firmware

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inje...

📅 2022-06-08
CVSS 8.8 Dossier →
CVE-2022-22282 CRITICAL
Component: sma_6200_firmware

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an ...

📅 2022-05-13
CVSS 9.8 Dossier →
Component: netextender

A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attack...

📅 2022-05-13
CVSS 7.8 Dossier →
CVE-2022-1702 MEDIUM
Component: sma_6200_firmware

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site a...

📅 2022-05-13
CVSS 6.1 Dossier →
Component: sma_6200_firmware

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data....

📅 2022-05-13
CVSS 7.5 Dossier →
Component: global_vpn_client

SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of t...

📅 2022-05-04
CVSS 7.8 Dossier →
Component: tz300p_firmware

A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to...

📅 2022-04-27
CVSS 7.5 Dossier →
Component: tz300p_firmware

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext....

📅 2022-04-27
CVSS 5.3 Dossier →
Component: tz300p_firmware

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user....

📅 2022-04-27
CVSS 5.3 Dossier →
Component: sonicos

Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially ...

📅 2022-04-27
CVSS 7.5 Dossier →
Page 4 of 9 (208 Total Records)