SonicWall vulnerabilities
221 CVEs and advisories name SonicWall as an affected vendor, 20 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-20021A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted
- CVE-2021-20018A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address.
- CVE-2021-20017A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobod
- CVE-2020-5148SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a poten
- CVE-2021-20016A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access
- CVE-2020-5147SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privil
- CVE-2020-5146A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST paramet
- CVE-2020-5145SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability.
- CVE-2020-5144SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded
- CVE-2020-5143SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based o
- CVE-2020-5142A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface.
- CVE-2020-5141A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service.
- CVE-2020-5140A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sendi
- CVE-2020-5139A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of In
- CVE-2020-5138A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVP
- CVE-2020-5137A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN
- CVE-2020-5136A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assi
- CVE-2020-5135A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code
- CVE-2020-5134A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash.
- CVE-2020-5133A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a fire
- CVE-2020-5132SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision
- CVE-2020-5131SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute c
- CVE-2020-5130SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the requ
- CVE-2020-5129A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which lea
- CVE-2019-7479A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode.
- CVE-2019-7478A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module.
- CVE-2019-7489A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution.
- CVE-2019-7488Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database.
- CVE-2019-7487Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes
- CVE-2019-7486Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script.