Approved changes feed: RSS · Atom

cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma 100 Firmware (20bebf3f-c40b-5e18-8ae2-792b0a70e5bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32821 vulnerable 2026-06-08 07:19:00.900337 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.
Published: 2025-05-07T17:22:14.812Z
Updated: 2026-02-26T18:28:49.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32820 vulnerable 2026-06-08 07:19:00.899147 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
Published: 2025-05-07T17:20:10.699Z
Updated: 2025-05-07T18:53:33.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32819 vulnerable 2026-06-08 07:19:00.883905 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Published: 2025-05-07T17:18:23.274Z
Updated: 2026-02-26T18:28:50.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20050 vulnerable 2026-06-08 05:29:08.185673 Details available
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.
Published: 2021-12-23T01:20:11.000Z
Updated: 2024-08-03T17:30:07.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20049 vulnerable 2026-06-08 05:29:08.172101 Details available
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.
Published: 2021-12-23T01:20:09.000Z
Updated: 2024-08-03T17:30:07.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20016 vulnerable 2026-06-08 05:29:07.990393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5146 vulnerable 2026-06-08 05:26:41.454383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7486 vulnerable 2026-06-08 05:14:14.498267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7485 vulnerable 2026-06-08 05:14:14.497959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7484 vulnerable 2026-06-08 05:14:14.497657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7483 vulnerable 2026-06-08 05:14:14.497320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7482 vulnerable 2026-06-08 05:14:14.496841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7481 vulnerable 2026-06-08 05:14:14.495353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.