All packages
SonicWall SMA100 vulnerabilities
3 known CVE vulnerabilities in SonicWall SMA100, translated and rated.
- CVE-2021-20016CriticalActively exploited
A SQL injection vulnerability in SonicWall SSLVPN SMA100 allows a remote unauthenticated attacker to perform SQL queries to access usernames, passwords, and other session-related information. This affects SMA100 build version 10.x.
- CVE-2019-7483HighActively exploited
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. The vulnerability does not allow reading file contents, only detecting their existence.
- CVE-2019-7481HighActively exploited
A vulnerability in SonicWall SMA100 allows an unauthenticated user to gain read-only access to unauthorized resources. This affects SMA100 version 9.0.0.3 and earlier.