Approved changes feed: RSS · Atom

cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma 100 (07f3d120-4322-5649-a66c-3425837e6aee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32821 not_vulnerable 2026-06-08 07:19:00.900476 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.
Published: 2025-05-07T17:22:14.812Z
Updated: 2026-02-26T18:28:49.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32820 not_vulnerable 2026-06-08 07:19:00.899316 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
Published: 2025-05-07T17:20:10.699Z
Updated: 2025-05-07T18:53:33.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32819 not_vulnerable 2026-06-08 07:19:00.884680 Details available
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Published: 2025-05-07T17:18:23.274Z
Updated: 2026-02-26T18:28:50.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20016 not_vulnerable 2026-06-08 05:29:07.992488 Details available
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.
Published: 2021-02-03T20:35:14.000Z
Updated: 2025-10-21T23:35:28.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5146 not_vulnerable 2026-06-08 05:26:41.455510 Details available
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.
Published: 2021-01-09T00:15:14.000Z
Updated: 2024-08-04T08:22:09.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7486 not_vulnerable 2026-06-08 05:14:14.498289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7485 not_vulnerable 2026-06-08 05:14:14.497980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7484 not_vulnerable 2026-06-08 05:14:14.497678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7483 not_vulnerable 2026-06-08 05:14:14.497344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7482 not_vulnerable 2026-06-08 05:14:14.496866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7481 not_vulnerable 2026-06-08 05:14:14.496245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.