Sonicwall Sma 500v — known CVE vulnerabilities

Every CVE whose affected-product data names Sonicwall Sma 500v, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-20016 — CVSS 9.8 (critical) — actively exploited: A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to…
• CVE-2021-20034 — CVSS 9.1 (critical): An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete…
• CVE-2021-20035 — CVSS 6.5 (medium) — actively exploited: Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary…