Approved changes feed: RSS · Atom

cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*

part: o version: 10.2.1.1-19sv update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma 400 Firmware (161a205a-4100-5998-9d85-7c57a0bdea84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20045 vulnerable 2026-06-08 05:29:08.149801 Details available
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Published: 2021-12-08T09:55:29.000Z
Updated: 2024-08-03T17:30:07.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20044 vulnerable 2026-06-08 05:29:08.148839 Details available
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Published: 2021-12-08T09:55:28.000Z
Updated: 2024-08-03T17:30:07.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20043 vulnerable 2026-06-08 05:29:08.147967 Details available
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Published: 2021-12-08T09:55:27.000Z
Updated: 2024-08-03T17:30:07.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20042 vulnerable 2026-06-08 05:29:08.146808 Details available
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Published: 2021-12-08T09:55:25.000Z
Updated: 2024-08-03T17:30:07.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20041 vulnerable 2026-06-08 05:29:08.146057 Details available
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Published: 2021-12-08T09:55:24.000Z
Updated: 2024-08-03T17:30:07.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20040 vulnerable 2026-06-08 05:29:08.144825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20039 vulnerable 2026-06-08 05:29:08.142968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20038 vulnerable 2026-06-08 05:29:08.135036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.