SonicWall SMA1000 series appliances vulnerabilities

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.

The SonicWall SMA1000 series appliances have an observable response discrepancy vulnerability that allows a remote attacker to enumerate SSL VPN user credentials.

The SonicWall SMA1000 series appliances are vulnerable to SQL injection, allowing a remote attacker with read-only administrator privileges to escalate to full administrator rights.