sonicwall Vulnerability Advisory Catalog

Total 208 security vulnerabilities recorded for sonicwall software and firmware.

← Back to All Vendors
CVE-2020-5134 MEDIUM
Component: sonicos

A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability...

📅 2020-10-12
CVSS 6.5 Dossier →
Component: sonicos

A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash...

📅 2020-10-12
CVSS 7.5 Dossier →
CVE-2020-5132 MEDIUM
Component: sma100_firmware

SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerabi...

📅 2020-09-30
CVSS 5.3 Dossier →
Component: netextender

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with t...

📅 2020-07-17
CVSS 7.8 Dossier →
CVE-2020-5130 MEDIUM
Component: sonicos

SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This ...

📅 2020-07-17
CVSS 5.3 Dossier →
Component: sma1000_firmware

A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Deni...

📅 2020-03-26
CVSS 7.5 Dossier →
CVE-2013-1359 CRITICAL
Component: analyzer

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Ma...

📅 2020-02-11
CVSS 9.8 Dossier →
CVE-2013-1360 CRITICAL
Component: analyzer

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Ma...

📅 2020-02-11
CVSS 9.8 Dossier →
Component: sonicos

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen ...

📅 2019-12-31
CVSS 7.2 Dossier →
CVE-2019-7478 CRITICAL
Component: global_management_system

A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8...

📅 2019-12-31
CVSS 9.8 Dossier →
CVE-2019-7489 CRITICAL
Component: email_security_appliance

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Emai...

📅 2019-12-23
CVSS 9.8 Dossier →
CVE-2019-7488 CRITICAL
Component: email_security_appliance

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulner...

📅 2019-12-23
CVSS 9.8 Dossier →
Component: sonicos

Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a ...

📅 2019-12-19
CVSS 7.8 Dossier →
Component: sma_100_firmware

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100...

📅 2019-12-19
CVSS 8.8 Dossier →
Component: sma_100_firmware

Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA1...

📅 2019-12-19
CVSS 8.8 Dossier →
CVE-2019-7484 MEDIUM
Component: sma_100_firmware

Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulner...

📅 2019-12-19
CVSS 6.5 Dossier →
Component: sma_100_firmware

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a f...

📅 2019-12-19
CVSS 7.5 Dossier →
CVE-2019-7482 CRITICAL
Component: sma_100_firmware

Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability imp...

📅 2019-12-19
CVSS 9.8 Dossier →
Component: sma_100_firmware

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 ver...

📅 2019-12-17
CVSS 7.5 Dossier →
Component: global_management_system

A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerab...

📅 2019-04-26
CVSS 8.1 Dossier →
Component: sonicos

A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are ...

📅 2019-04-02
CVSS 7.5 Dossier →
CVE-2019-7475 CRITICAL
Component: sonicos

A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced ...

📅 2019-04-02
CVSS 9.8 Dossier →
CVE-2019-7474 MEDIUM
Component: sonicos

A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certi...

📅 2019-04-02
CVSS 6.5 Dossier →
CVE-2018-9867 MEDIUM
Component: sonicos

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicW...

📅 2019-02-19
CVSS 5.5 Dossier →
Page 7 of 9 (208 Total Records)