sonicwall

250 tracked vulnerabilities.

CVE-2023-1101 HIGH
SonicOS < 7.0.1-5111 - Authenticated Excessive MFA Attempts
Mar 02, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-0656 HIGH
SonicOS < 7.0.1-5111 - Unauthenticated Denial of Service via Stack-based Buffer Overflow
Mar 02, 2023
CVSS 7.5
EPSS 0.31
CVE-2023-0655 MEDIUM
SonicWall Email Security < 10.0.19.7431 - Unauthenticated Sensitive Information Exposure via Error Page
Feb 14, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-0126 HIGH NUCLEI
SonicWall SMA1000 Firmware 12.4.2 - Unauthenticated Path Traversal
Jan 19, 2023
CVSS 7.5
EPSS 0.93
CVE-2022-47522 HIGH
IEEE 802.11 through 802.11ax - Authentication Bypass by MAC Address Spoofing
Apr 15, 2023
CVSS 7.5
EPSS 0.16
CVE-2022-2915 HIGH
SonicWall SMA 200/210/400/410/500v Firmware < 10.2.1.5-34sv - Authenticated Heap-based Buffer Overflow
Aug 26, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-2324 HIGH
SonicWall Hosted Email Security <10.0.17.7319 - Info Disclosure
Jul 29, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-22280 CRITICAL
SonicWall GMS <9.3.1-SP2-Hotfix1 - SQL Injection
Jul 29, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-2323 HIGH
SonicWall Switch Firmware < 1.2.0.0-3 - Authenticated Remote Code Execution via Command Injection
Jul 29, 2022
CVSS 8.8
EPSS 0.01
CVE-2022-1703 HIGH
SonicWall SMA 210/410/500v Firmware < 10.2.1.4-31sv - Authenticated OS Command Injection
Jun 08, 2022
CVSS 8.8
EPSS 0.04
CVE-2022-22282 CRITICAL
SonicWall SMA1000 - Improper Access Control
May 13, 2022
CVSS 9.8
EPSS 0.00
CVE-2022-22281 HIGH
SonicWall SSL-VPN NetExtender - Buffer Overflow
May 13, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-1702 MEDIUM
SonicWall SMA1000 Series Firmware <= 12.4.1-02965 - Open Redirect via User-Controlled Input
May 13, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-1701 HIGH
SonicWall SMA1000 - Info Disclosure
May 13, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-22278 HIGH
SonicWall Multiple Firewalls < 7.0.1 - DoS via CFS 403 Response
Apr 27, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-22277 MEDIUM
SonicWall TZ300/TZ350/TZ370/NSSP 10700-15700 SNMP Sensitive Information Exposure
Apr 27, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-22276 MEDIUM
SonicWall TZ/NSv/NSSP Firmware < 7.0.1 - Unauthorized Sensitive Information Exposure via SNMP
Apr 27, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-22275 HIGH
SonicOS 7.0.0.0-7.0.1-5030-r2007 - Denial of Service via TCP Handshake Bypass
Apr 27, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-22279 MEDIUM
Secure Remote Access/SMA <9.0.0.5-19sv - Info Disclosure
Apr 13, 2022
CVSS 4.9
EPSS 0.01
CVE-2022-22274 CRITICAL
SonicOS < 7.0.1-5050 and SonicOSv < 6.5.4.4-44v-21-1452 - Unauthenticated Stack-based Buffer Overflow via HTTP Request
Mar 25, 2022
CVSS 9.8
EPSS 0.47
CVE-2022-22273 CRITICAL
Secure Remote Access <8 - OS Command Injection
Mar 17, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-0847 HIGH KEV
Dirty Pipe Local Privilege Escalation via CVE-2022-0847
Mar 10, 2022
CVSS 7.8
EPSS 0.82
CVE-2021-20030 HIGH
SonicWall Global Management System < 9.3.2 - Unauthenticated Path Traversal
Oct 13, 2022
CVSS 7.5
EPSS 0.01
CVE-2021-20051 HIGH
SonicWall Global VPN Client < 4.10.7.1117 - DLL Search Order Hijacking in Installer Component
May 04, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-20048 HIGH
SonicOS < 7.0.1-r1456 - Authenticated Stack-based Buffer Overflow via SessionID HTTP Response Header
Jan 10, 2022
CVSS 8.8
EPSS 0.01
Products
sonicos 68 sma_210_firmware 35 sma_410_firmware 35 global_management_system 32 sma_500v_firmware 32 sma_200_firmware 27 sma_400_firmware 27 sonicosv 19 analytics 17 SonicOS 14 sma_100_firmware 13 email_security 12 analyzer 10 netextender 9 scrutinizer 7 SMA1000 6 global_vpn_client 6 sma6200_firmware 6 sma6210_firmware 6 sma7200_firmware 6 sma7210_firmware 6 sma8200v 6 email_security_appliance_5000_firmware 5 email_security_appliance_5050_firmware 5 email_security_appliance_7000_firmware 5 email_security_appliance_7050_firmware 5 email_security_appliance_9000_firmware 5 sma1000_firmware 5 sma100_firmware 5 Email Security 4
Quick Filters
Critical CVEs With Exploits In CISA KEV