Sonicwall Sma100 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Sonicwall Sma100 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-20017 — CVSS 8.8 (high): A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a…
• CVE-2021-3450 — CVSS 7.4 (high): The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by…
• CVE-2021-3449 — CVSS 5.9 (medium): An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation…
• CVE-2020-5132 — CVSS 5.3 (medium): SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name…
• CVE-2021-20018 — CVSS 4.9 (medium): A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address…