Skip to content
Noroxi

SonicWall records

236 published records for vendor sonicwall.

Researcher profile

Entered KEV
23 · 9.7%
Weaponized
36 · 15.3%
Pre-auth RCE
22
With a fix record
5.5%
Median publish → KEV
197 days

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

236 records
  • CVE-2021-44228
    100Now

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    CriticalCVSS 10.0KEVWeaponizedEPSS 100%

    apache · log4jDec 10, 2021

  • CVE-2021-20038
    99Now

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthentic

    CriticalCVSS 9.8KEVWeaponizedEPSS 100%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2024-53704
    98Now

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    sonicwall · sonicosJan 9, 2025

  • CVE-2021-45046
    96Now

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    CriticalCVSS 9.0KEVWeaponizedEPSS 100%

    apache · log4jDec 14, 2021

  • CVE-2024-38475
    96Now

    Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

    CriticalCVSS 9.1KEVWeaponizedEPSS 100%

    apache · http serverJul 1, 2024

  • CVE-2021-20021
    96Now

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted

    CriticalCVSS 9.8KEVWeaponizedEPSS 89%

    sonicwall · email securityApr 9, 2021

  • CVE-2019-7481
    90Now

    Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources.

    HighCVSS 7.5KEVWeaponizedEPSS 100%

    sonicwall · sma 100 firmwareDec 17, 2019

  • CVE-2022-0847
    89Now

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe

    HighCVSS 7.8KEVWeaponizedEPSS 93%

    linux · linux kernelMar 10, 2022

  • CVE-2023-44221
    81Now

    Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administr

    HighCVSS 7.2KEVWeaponizedEPSS 76%

    sonicwall · sma 200 firmwareDec 5, 2023

  • CVE-2021-20016
    81Now

    A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access

    CriticalCVSS 9.8KEVWeaponizedEPSS 40%

    sonicwall · sma 100 firmwareFeb 4, 2021

  • CVE-2021-20028
    78This week

    Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, s

    CriticalCVSS 9.8KEVWeaponizedEPSS 30%

    sonicwall · sma 210 firmwareAug 4, 2021

  • CVE-2020-5135
    77This week

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code

    CriticalCVSS 9.8KEVWeaponizedEPSS 27%

    sonicwall · sonicosOct 12, 2020

  • CVE-2025-23006
    76This week

    Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and

    CriticalCVSS 9.8KEVWeaponizedEPSS 23%

    sonicwall · sma8200vJan 23, 2025

  • CVE-2024-40766
    75This week

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized

    CriticalCVSS 9.8KEVWeaponizedEPSS 18%

    sonicwall · sonicosAug 23, 2024

  • CVE-2026-83548
    72This week

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.

    CriticalCVSS 10.0KEVWeaponizedEPSS 8%

    sonicwall · sma8200vSep 1, 2026

  • CVE-2026-15409
    72This week

    A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface.

    CriticalCVSS 10.0KEVWeaponizedEPSS 7%

    sonicwall · sma6210 firmwareJul 14, 2026

  • CVE-2013-1359
    66This week

    An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Un

    CriticalCVSS 9.8WeaponizedEPSS 89%

    sonicwall · analyzerFeb 11, 2020

  • CVE-2021-20023
    65This week

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on th

    MediumCVSS 4.9KEVWeaponizedEPSS 52%

    sonicwall · email securityApr 20, 2021

  • CVE-2026-83549
    64This week

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi

    HighCVSS 7.8KEVWeaponizedEPSS 10%

    sonicwall · sma8200vSep 1, 2026

  • CVE-2021-20022
    63This week

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to

    HighCVSS 7.2KEVWeaponizedEPSS 17%

    sonicwall · email securityApr 9, 2021

  • CVE-2024-6387
    62This week

    Openssh: regresshion - race condition in ssh allows rce/dos

    HighCVSS 8.1Proof of conceptEPSS 100%

    sonicwall · sma 6200 firmwareJul 1, 2024

  • CVE-2022-22274
    62This week

    A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Serv

    CriticalCVSS 9.8Proof of conceptEPSS 76%

    sonicwall · sonicosMar 25, 2022

  • CVE-2019-12255
    62This week

    Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).

    CriticalCVSS 9.8Proof of conceptEPSS 75%

    windriver · vxworksAug 9, 2019

  • CVE-2026-15410
    62This week

    Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Man

    HighCVSS 7.2KEVWeaponizedEPSS 12%

    sonicwall · sma6210 firmwareJul 14, 2026

  • CVE-2023-34127
    61This week

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analyti

    HighCVSS 8.8WeaponizedEPSS 86%

    sonicwall · analyticsJul 12, 2023