Sonicwall Sma1000 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Sonicwall Sma1000 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-33909 — CVSS 7.8 (high): fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an…
• CVE-2022-0847 — CVSS 7.8 (high) — actively exploited: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe…
• CVE-2020-5129 — CVSS 7.5 (high): A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which…
• CVE-2023-0126 — CVSS 7.5 (high): Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access…
• CVE-2025-2170 — CVSS 7.2 (high): A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific…