Approved changes feed: RSS · Atom

cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma 400 Firmware (161a205a-4100-5998-9d85-7c57a0bdea84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32821 vulnerable 2026-06-08 07:19:00.900685 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.
Published: 2025-05-07T17:22:14.812Z
Updated: 2026-02-26T18:28:49.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32820 vulnerable 2026-06-08 07:19:00.899598 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
Published: 2025-05-07T17:20:10.699Z
Updated: 2025-05-07T18:53:33.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32819 vulnerable 2026-06-08 07:19:00.894874 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Published: 2025-05-07T17:18:23.274Z
Updated: 2026-02-26T18:28:50.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53703 vulnerable 2026-06-08 06:54:15.360489 Details available
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.
Published: 2024-12-05T13:59:35.490Z
Updated: 2024-12-07T04:55:30.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53702 vulnerable 2026-06-08 06:54:15.356122 Details available
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret.
Published: 2024-12-05T13:53:37.282Z
Updated: 2024-12-05T15:10:12.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45319 vulnerable 2026-06-08 06:45:55.885991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45318 vulnerable 2026-06-08 06:45:55.881963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40763 vulnerable 2026-06-08 06:43:53.148941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38475 vulnerable 2026-06-08 06:41:47.229276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22395 vulnerable 2026-06-08 06:29:34.853923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5970 vulnerable 2026-06-08 06:19:45.261196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44221 vulnerable 2026-06-08 06:12:39.611498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2915 vulnerable 2026-06-08 05:43:36.713104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22273 vulnerable 2026-06-08 05:40:07.919275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20050 vulnerable 2026-06-08 05:29:08.186000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20049 vulnerable 2026-06-08 05:29:08.181852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20035 vulnerable 2026-06-08 05:29:08.122192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20034 vulnerable 2026-06-08 05:29:08.120076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.