Sonicwall: >> Sma 200 Firmware >> 10.2.1.0 Security Vulnerabilities
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
CVSS Score
8.8
EPSS Score
0.006
Published
2023-12-05
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.
CVSS Score
8.8
EPSS Score
0.02
Published
2022-08-26
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
CVSS Score
9.1
EPSS Score
0.047
Published
2021-09-27
CVE-2021-20035
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
Known exploited
CVSS Score
6.5
EPSS Score
0.056
Published
2021-09-27
Page 2