# cve.now: SonicWall

The newest entries naming SonicWall as an affected vendor (up to 200), of 221 in all, 20 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-19703](https://cve.now/CVE-2026-19703.md): A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially… (CVSS 5.1)
- [CVE-2026-77709](https://cve.now/CVE-2026-77709.md): A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in… (CVSS 5.9)
- [CVE-2026-77708](https://cve.now/CVE-2026-77708.md): A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in… (CVSS 5.9)
- [CVE-2026-19868](https://cve.now/CVE-2026-19868.md): An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate… (CVSS 7.5, KEV)
- [CVE-2026-82308](https://cve.now/CVE-2026-82308.md): A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially… (CVSS 7.5)
- [CVE-2026-107154](https://cve.now/CVE-2026-107154.md): A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially… (CVSS 8.8)
- [CVE-2026-107155](https://cve.now/CVE-2026-107155.md): A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could… (CVSS 8.8)
- [CVE-2026-109594](https://cve.now/CVE-2026-109594.md): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified… (CVSS 6.8)
- [CVE-2026-109593](https://cve.now/CVE-2026-109593.md): An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files… (CVSS 9.1)
- [CVE-2026-100232](https://cve.now/CVE-2026-100232.md): Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi (CVSS 7.2)
- [CVE-2026-96540](https://cve.now/CVE-2026-96540.md): An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, pot (CVSS 8.8)
- [CVE-2026-102258](https://cve.now/CVE-2026-102258.md): Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) wh (CVSS 6.1)
- [CVE-2026-102257](https://cve.now/CVE-2026-102257.md): A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the (CVSS 7.2)
- [CVE-2026-102256](https://cve.now/CVE-2026-102256.md): Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi (CVSS 7.8)
- [CVE-2026-102255](https://cve.now/CVE-2026-102255.md): A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. (CVSS 10.0)
- [CVE-2026-81939](https://cve.now/CVE-2026-81939.md): A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an (CVSS 9.1)
- [CVE-2026-78328](https://cve.now/CVE-2026-78328.md): A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged (CVSS 9.1)
- [CVE-2026-78327](https://cve.now/CVE-2026-78327.md): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Securit (CVSS 9.1)
- [CVE-2026-83549](https://cve.now/CVE-2026-83549.md): Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi (CVSS 7.8, KEV)
- [CVE-2026-83548](https://cve.now/CVE-2026-83548.md): A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. (CVSS 10.0, KEV)
- [CVE-2026-66153](https://cve.now/CVE-2026-66153.md): The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to mani (CVSS 7.0)
- [CVE-2026-66152](https://cve.now/CVE-2026-66152.md): A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file (CVSS 8.8)
- [CVE-2026-66150](https://cve.now/CVE-2026-66150.md): Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated at (CVSS 7.8)
- [CVE-2026-66149](https://cve.now/CVE-2026-66149.md): Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated at (CVSS 7.8)
- [CVE-2026-18634](https://cve.now/CVE-2026-18634.md): An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and (CVSS 8.4)
- [CVE-2026-66154](https://cve.now/CVE-2026-66154.md): An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) a (CVSS 8.3)
- [CVE-2026-66148](https://cve.now/CVE-2026-66148.md): An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier vers (CVSS 6.3)
- [CVE-2026-66147](https://cve.now/CVE-2026-66147.md): An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allo (CVSS 9.4)
- [CVE-2026-66146](https://cve.now/CVE-2026-66146.md): Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote (CVSS 6.1)
- [CVE-2026-66145](https://cve.now/CVE-2026-66145.md): An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remot (CVSS 9.1)
- [CVE-2026-66151](https://cve.now/CVE-2026-66151.md): SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, (CVSS 5.5)
- [CVE-2026-0516](https://cve.now/CVE-2026-0516.md): A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host (CVSS 6.5)
- [CVE-2026-15410](https://cve.now/CVE-2026-15410.md): Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Man (CVSS 7.2, KEV)
- [CVE-2026-15409](https://cve.now/CVE-2026-15409.md): A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. (CVSS 10.0, KEV)
- [CVE-2026-0206](https://cve.now/CVE-2026-0206.md): A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9)
- [CVE-2026-0205](https://cve.now/CVE-2026-0205.md): A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. (CVSS 6.8)
- [CVE-2026-0204](https://cve.now/CVE-2026-0204.md): A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific (CVSS 8.0)
- [CVE-2026-4116](https://cve.now/CVE-2026-4116.md): Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/C (CVSS 7.2)
- [CVE-2026-4114](https://cve.now/CVE-2026-4114.md): Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP a (CVSS 6.6)
- [CVE-2026-4113](https://cve.now/CVE-2026-4113.md): An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN us (CVSS 7.2)
- [CVE-2026-4112](https://cve.now/CVE-2026-4112.md): Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote (CVSS 7.2)
- [CVE-2026-3470](https://cve.now/CVE-2026-3470.md): A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowi (CVSS 3.8)
- [CVE-2026-3469](https://cve.now/CVE-2026-3469.md): A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote (CVSS 2.7)
- [CVE-2026-3468](https://cve.now/CVE-2026-3468.md): A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralizati (CVSS 4.8)
- [CVE-2026-3439](https://cve.now/CVE-2026-3439.md): A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall (CVSS 4.9)
- [CVE-2026-0402](https://cve.now/CVE-2026-0402.md): A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9)
- [CVE-2026-0401](https://cve.now/CVE-2026-0401.md): A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9)
- [CVE-2026-0400](https://cve.now/CVE-2026-0400.md): A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. (CVSS 4.9)
- [CVE-2026-0399](https://cve.now/CVE-2026-0399.md): Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking (CVSS 4.9)
- [CVE-2025-40602](https://cve.now/CVE-2025-40602.md): A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). (CVSS 6.6, KEV)
- [CVE-2025-40601](https://cve.now/CVE-2025-40601.md): A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Servic (CVSS 7.5)
- [CVE-2025-40605](https://cve.now/CVE-2025-40605.md): A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by inj (CVSS 5.3)
- [CVE-2025-40604](https://cve.now/CVE-2025-40604.md): Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verify (CVSS 6.5)
- [CVE-2025-40603](https://cve.now/CVE-2025-40603.md): A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administr (CVSS 4.5)
- [CVE-2025-40600](https://cve.now/CVE-2025-40600.md): Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause (CVSS 9.8)
- [CVE-2025-40598](https://cve.now/CVE-2025-40598.md): A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker t (CVSS 6.1)
- [CVE-2025-40597](https://cve.now/CVE-2025-40597.md): A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of… (CVSS 7.5)
- [CVE-2025-40596](https://cve.now/CVE-2025-40596.md): A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Se (CVSS 7.3)
- [CVE-2025-40599](https://cve.now/CVE-2025-40599.md): An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. (CVSS 9.1)
- [CVE-2025-40595](https://cve.now/CVE-2025-40595.md): A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. (CVSS 7.2)
- [CVE-2025-32821](https://cve.now/CVE-2025-32821.md): A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell com (CVSS 7.1)
- [CVE-2025-32820](https://cve.now/CVE-2025-32820.md): A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make an (CVSS 8.3)
- [CVE-2025-32819](https://cve.now/CVE-2025-32819.md): A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete (CVSS 8.8)
- [CVE-2025-2170](https://cve.now/CVE-2025-2170.md): A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific cond (CVSS 7.2)
- [CVE-2025-32818](https://cve.now/CVE-2025-32818.md): A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash t (CVSS 7.5)
- [CVE-2025-32817](https://cve.now/CVE-2025-32817.md): A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthoriz (CVSS 6.1)
- [CVE-2025-23010](https://cve.now/CVE-2025-23010.md): An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client whic (CVSS 7.2)
- [CVE-2025-23009](https://cve.now/CVE-2025-23009.md): A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an ar (CVSS 7.2)
- [CVE-2025-23008](https://cve.now/CVE-2025-23008.md): An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker (CVSS 7.2)
- [CVE-2025-23007](https://cve.now/CVE-2025-23007.md): A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentia (CVSS 5.5)
- [CVE-2025-23006](https://cve.now/CVE-2025-23006.md): Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and (CVSS 9.8, KEV)
- [CVE-2024-12802](https://cve.now/CVE-2024-12802.md): SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Secur (CVSS 9.1)
- [CVE-2024-12806](https://cve.now/CVE-2024-12806.md): A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file. (CVSS 4.9)
- [CVE-2024-12805](https://cve.now/CVE-2024-12805.md): A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads t (CVSS 7.2)
- [CVE-2024-12803](https://cve.now/CVE-2024-12803.md): A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and poten (CVSS 7.2)
- [CVE-2024-40765](https://cve.now/CVE-2024-40765.md): An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of S (CVSS 9.8)
- [CVE-2024-53706](https://cve.now/CVE-2024-53706.md): A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to (CVSS 7.8)
- [CVE-2024-53705](https://cve.now/CVE-2024-53705.md): A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection t (CVSS 7.5)
- [CVE-2024-53704](https://cve.now/CVE-2024-53704.md): An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. (CVSS 8.2, KEV)
- [CVE-2024-40762](https://cve.now/CVE-2024-40762.md): Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain ca (CVSS 9.8)
- [CVE-2024-53703](https://cve.now/CVE-2024-53703.md): A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod\_httprp library loaded by the Apache web serv (CVSS 8.1)
- [CVE-2024-53702](https://cve.now/CVE-2024-53702.md): Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, (CVSS 5.3)
- [CVE-2024-45319](https://cve.now/CVE-2024-45319.md): A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can cir (CVSS 6.3)
- [CVE-2024-45318](https://cve.now/CVE-2024-45318.md): A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and pot (CVSS 8.1)
- [CVE-2024-40763](https://cve.now/CVE-2024-40763.md): Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. (CVSS 7.5)
- [CVE-2024-45317](https://cve.now/CVE-2024-45317.md): A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthen (CVSS 7.5)
- [CVE-2024-45316](https://cve.now/CVE-2024-45316.md): The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier (CVSS 7.8)
- [CVE-2024-45315](https://cve.now/CVE-2024-45315.md): The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier (CVSS 5.5)
- [CVE-2024-40766](https://cve.now/CVE-2024-40766.md): An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized (CVSS 9.3, KEV)
- [CVE-2024-40764](https://cve.now/CVE-2024-40764.md): Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS) (CVSS 7.5)
- [CVE-2024-29014](https://cve.now/CVE-2024-29014.md): Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary… (CVSS 7.1)
- [CVE-2024-29013](https://cve.now/CVE-2024-29013.md): Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via (CVSS 5.3)
- [CVE-2024-29012](https://cve.now/CVE-2024-29012.md): Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS (CVSS 4.9)
- [CVE-2024-29011](https://cve.now/CVE-2024-29011.md): Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. (CVSS 7.5)
- [CVE-2024-29010](https://cve.now/CVE-2024-29010.md): The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the di (CVSS 7.1)
- [CVE-2024-22398](https://cve.now/CVE-2024-22398.md): An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Security Appliance could al (CVSS 4.9)
- [CVE-2024-22397](https://cve.now/CVE-2024-22397.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authentica (CVSS 8.3)
- [CVE-2024-22396](https://cve.now/CVE-2024-22396.md): An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of S (CVSS 5.3)
- [CVE-2024-22395](https://cve.now/CVE-2024-22395.md): Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could po (CVSS 6.3)
- [CVE-2024-22394](https://cve.now/CVE-2024-22394.md): An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow (CVSS 9.8)
- [CVE-2023-6340](https://cve.now/CVE-2023-6340.md): SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. (CVSS 5.5)
- [CVE-2023-5970](https://cve.now/CVE-2023-5970.md): Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external d (no CVSS)
- [CVE-2023-44221](https://cve.now/CVE-2023-44221.md): Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administr (CVSS 7.2, KEV)
- [CVE-2023-44220](https://cve.now/CVE-2023-44220.md): SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in th (no CVSS)
- [CVE-2023-44219](https://cve.now/CVE-2023-44219.md): A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a (no CVSS)
- [CVE-2023-41715](https://cve.now/CVE-2023-41715.md): SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileg (CVSS 8.8)
- [CVE-2023-41713](https://cve.now/CVE-2023-41713.md): SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function. (no CVSS)
- [CVE-2023-41712](https://cve.now/CVE-2023-41712.md): SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. (no CVSS)
- [CVE-2023-41711](https://cve.now/CVE-2023-41711.md): SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash (no CVSS)
- [CVE-2023-39280](https://cve.now/CVE-2023-39280.md): SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firew (no CVSS)
- [CVE-2023-39279](https://cve.now/CVE-2023-39279.md): SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash (no CVSS)
- [CVE-2023-39278](https://cve.now/CVE-2023-39278.md): SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash (no CVSS)
- [CVE-2023-39277](https://cve.now/CVE-2023-39277.md): SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a (no CVSS)
- [CVE-2023-39276](https://cve.now/CVE-2023-39276.md): SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash. (no CVSS)
- [CVE-2023-44218](https://cve.now/CVE-2023-44218.md): A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system (CVSS 8.8)
- [CVE-2023-44217](https://cve.now/CVE-2023-44217.md): A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local lo (CVSS 7.8)
- [CVE-2023-34137](https://cve.now/CVE-2023-34137.md): SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authenticatio (no CVSS)
- [CVE-2023-34136](https://cve.now/CVE-2023-34136.md): Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the (no CVSS)
- [CVE-2023-34135](https://cve.now/CVE-2023-34135.md): Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlyi (no CVSS)
- [CVE-2023-34134](https://cve.now/CVE-2023-34134.md): Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to rea (no CVSS)
- [CVE-2023-34133](https://cve.now/CVE-2023-34133.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an (CVSS 7.5)
- [CVE-2023-34132](https://cve.now/CVE-2023-34132.md): Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. (no CVSS)
- [CVE-2023-34131](https://cve.now/CVE-2023-34131.md): Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker (no CVSS)
- [CVE-2023-34130](https://cve.now/CVE-2023-34130.md): SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. (no CVSS)
- [CVE-2023-34129](https://cve.now/CVE-2023-34129.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authen (no CVSS)
- [CVE-2023-34128](https://cve.now/CVE-2023-34128.md): Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. (no CVSS)
- [CVE-2023-34127](https://cve.now/CVE-2023-34127.md): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analyti (CVSS 8.8)
- [CVE-2023-34126](https://cve.now/CVE-2023-34126.md): Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privile (no CVSS)
- [CVE-2023-34125](https://cve.now/CVE-2023-34125.md): Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem wi (no CVSS)
- [CVE-2023-34124](https://cve.now/CVE-2023-34124.md): The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. (CVSS 9.8)
- [CVE-2023-34123](https://cve.now/CVE-2023-34123.md): Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. (no CVSS)
- [CVE-2023-1101](https://cve.now/CVE-2023-1101.md): SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes. (CVSS 8.8)
- [CVE-2023-0656](https://cve.now/CVE-2023-0656.md): A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which (no CVSS)
- [CVE-2023-0655](https://cve.now/CVE-2023-0655.md): SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes (CVSS 5.3)
- [CVE-2023-0126](https://cve.now/CVE-2023-0126.md): Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbit (CVSS 7.5)
- [CVE-2021-20030](https://cve.now/CVE-2021-20030.md): SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing (CVSS 7.5)
- [CVE-2022-2915](https://cve.now/CVE-2022-2915.md): A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Servi (no CVSS)
- [CVE-2022-2324](https://cve.now/CVE-2022-2324.md): Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service i (no CVSS)
- [CVE-2022-22280](https://cve.now/CVE-2022-22280.md): Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWa (no CVSS)
- [CVE-2022-2323](https://cve.now/CVE-2022-2323.md): Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in (no CVSS)
- [CVE-2022-1703](https://cve.now/CVE-2022-1703.md): Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attack (no CVSS)
- [CVE-2022-22282](https://cve.now/CVE-2022-22282.md): SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connection (no CVSS)
- [CVE-2022-22281](https://cve.now/CVE-2022-22281.md): A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows (no CVSS)
- [CVE-2022-1702](https://cve.now/CVE-2022-1702.md): SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an exter (no CVSS)
- [CVE-2022-1701](https://cve.now/CVE-2022-1701.md): SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. (no CVSS)
- [CVE-2021-20051](https://cve.now/CVE-2021-20051.md): SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability i (no CVSS)
- [CVE-2022-22278](https://cve.now/CVE-2022-22278.md): A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when us (no CVSS)
- [CVE-2022-22277](https://cve.now/CVE-2022-22277.md): A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext. (no CVSS)
- [CVE-2022-22276](https://cve.now/CVE-2022-22276.md): A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user. (no CVSS)
- [CVE-2022-22275](https://cve.now/CVE-2022-22275.md): Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake po (no CVSS)
- [CVE-2022-22279](https://cve.now/CVE-2022-22279.md): A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware version (no CVSS)
- [CVE-2022-22274](https://cve.now/CVE-2022-22274.md): A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Serv (no CVSS)
- [CVE-2022-22273](https://cve.now/CVE-2022-22273.md): Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) p (no CVSS)
- [CVE-2021-20048](https://cve.now/CVE-2021-20048.md): A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Servic (no CVSS)
- [CVE-2021-20046](https://cve.now/CVE-2021-20046.md): A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of S (no CVSS)
- [CVE-2021-20050](https://cve.now/CVE-2021-20050.md): An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user l (no CVSS)
- [CVE-2021-20049](https://cve.now/CVE-2021-20049.md): A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration base (no CVSS)
- [CVE-2021-20047](https://cve.now/CVE-2021-20047.md): SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. (no CVSS)
- [CVE-2021-20045](https://cve.now/CVE-2021-20045.md): A buffer overflow vulnerability in SMA100 sonicfiles RAC\_COPY\_TO (RacNumber 36) method allows a remote unauthenticated attacker to potential (no CVSS)
- [CVE-2021-20044](https://cve.now/CVE-2021-20044.md): A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system (no CVSS)
- [CVE-2021-20043](https://cve.now/CVE-2021-20043.md): A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially exe (no CVSS)
- [CVE-2021-20042](https://cve.now/CVE-2021-20042.md): An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. (no CVSS)
- [CVE-2021-20041](https://cve.now/CVE-2021-20041.md): An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfile (no CVSS)
- [CVE-2021-20040](https://cve.now/CVE-2021-20040.md): A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or (no CVSS)
- [CVE-2021-20039](https://cve.now/CVE-2021-20039.md): Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenti (CVSS 8.8)
- [CVE-2021-20038](https://cve.now/CVE-2021-20038.md): A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod\_cgi module environment variables allows a remote unauthentic (CVSS 9.8, KEV)
- [CVE-2021-20031](https://cve.now/CVE-2021-20031.md): A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary w (no CVSS)
- [CVE-2021-20035](https://cve.now/CVE-2021-20035.md): Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary co (CVSS 6.5, KEV)
- [CVE-2021-20034](https://cve.now/CVE-2021-20034.md): An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete a (no CVSS)
- [CVE-2021-20037](https://cve.now/CVE-2021-20037.md): SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalati (no CVSS)
- [CVE-2021-20032](https://cve.now/CVE-2021-20032.md): SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vulnerability which pot (no CVSS)
- [CVE-2021-20028](https://cve.now/CVE-2021-20028.md): Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, s (CVSS 9.8, KEV)
- [CVE-2021-20024](https://cve.now/CVE-2021-20024.md): Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or (no CVSS)
- [CVE-2021-20019](https://cve.now/CVE-2021-20019.md): A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead (no CVSS)
- [CVE-2021-20027](https://cve.now/CVE-2021-20027.md): A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted reques (no CVSS)
- [CVE-2021-20026](https://cve.now/CVE-2021-20026.md): A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP r (no CVSS)
- [CVE-2021-20025](https://cve.now/CVE-2021-20025.md): SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at ini (no CVSS)
- [CVE-2021-20023](https://cve.now/CVE-2021-20023.md): SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on th (CVSS 4.9, KEV)
- [CVE-2021-20020](https://cve.now/CVE-2021-20020.md): A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root. (no CVSS)
- [CVE-2021-20022](https://cve.now/CVE-2021-20022.md): SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to (CVSS 7.2, KEV)
- [CVE-2021-20021](https://cve.now/CVE-2021-20021.md): A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted (CVSS 9.8, KEV)
- [CVE-2021-20018](https://cve.now/CVE-2021-20018.md): A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. (no CVSS)
- [CVE-2021-20017](https://cve.now/CVE-2021-20017.md): A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobod (no CVSS)
- [CVE-2020-5148](https://cve.now/CVE-2020-5148.md): SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a poten (no CVSS)
- [CVE-2021-20016](https://cve.now/CVE-2021-20016.md): A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access (CVSS 9.8, KEV)
- [CVE-2020-5147](https://cve.now/CVE-2020-5147.md): SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privil (no CVSS)
- [CVE-2020-5146](https://cve.now/CVE-2020-5146.md): A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST paramet (no CVSS)
- [CVE-2020-5145](https://cve.now/CVE-2020-5145.md): SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. (no CVSS)
- [CVE-2020-5144](https://cve.now/CVE-2020-5144.md): SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded (no CVSS)
- [CVE-2020-5143](https://cve.now/CVE-2020-5143.md): SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based o (no CVSS)
- [CVE-2020-5142](https://cve.now/CVE-2020-5142.md): A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. (no CVSS)
- [CVE-2020-5141](https://cve.now/CVE-2020-5141.md): A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. (no CVSS)
- [CVE-2020-5140](https://cve.now/CVE-2020-5140.md): A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sendi (no CVSS)
- [CVE-2020-5139](https://cve.now/CVE-2020-5139.md): A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of In (no CVSS)
- [CVE-2020-5138](https://cve.now/CVE-2020-5138.md): A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVP (no CVSS)
- [CVE-2020-5137](https://cve.now/CVE-2020-5137.md): A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN (no CVSS)
- [CVE-2020-5136](https://cve.now/CVE-2020-5136.md): A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assi (no CVSS)
- [CVE-2020-5135](https://cve.now/CVE-2020-5135.md): A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code (CVSS 9.8, KEV)
- [CVE-2020-5134](https://cve.now/CVE-2020-5134.md): A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. (no CVSS)
- [CVE-2020-5133](https://cve.now/CVE-2020-5133.md): A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a fire (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/sonicwall
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.