SonicWall SonicOS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
117 matching records
- Medium6.5SonicWall SMA100 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 4.41%Sep 27, 2021
- High7.5A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive da…Check if you run itEPSS 1.41%Jun 23, 2021
- High7.5A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request.Check if you run itEPSS 1.29%Jun 14, 2021
- Critical9.8SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityPatch nowKEVEPSS 30.08%Jun 8, 2021
- Medium4.9SonicWall Email Security Path Traversal VulnerabilityPatch nowKEVEPSS 51.69%Apr 20, 2021
- High7.2SonicWall Email Security Unrestricted Upload of File VulnerabilityPatch nowKEVEPSS 16.64%Apr 9, 2021
- Critical9.8SonicWall Email Security Improper Privilege Management VulnerabilityPatch nowKEVEPSS 88.78%Apr 9, 2021
- Critical9.8SonicWall SSLVPN SMA100 SQL Injection VulnerabilityPatch nowKEVEPSS 40.04%Feb 3, 2021
- Medium5.3SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses.Check if you run itEPSS 1.59%Oct 12, 2020
- Medium6.1A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface.Check if you run itEPSS 1.25%Oct 12, 2020
- Medium6.5A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service.Check if you run itEPSS 1.24%Oct 12, 2020
- High7.5A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request…Check if you run itEPSS 1.76%Oct 12, 2020
- High7.5A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to…Check if you run itEPSS 1.76%Oct 12, 2020
- High7.5A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash.Check if you run itEPSS 1.77%Oct 12, 2020
- High7.5A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash.Check if you run itEPSS 1.75%Oct 12, 2020
- Medium6.5A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a…Check if you run itEPSS 1.12%Oct 12, 2020
- Medium6.5A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash.Check if you run itEPSS 1.12%Oct 12, 2020
- High7.5A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash.Check if you run itEPSS 1.75%Oct 12, 2020
- Critical9.8SonicWall SonicOS Buffer Overflow VulnerabilityPatch nowKEVEPSS 26.87%Oct 12, 2020
- Medium5.3SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability.Check if you run itEPSS 0.98%Sep 30, 2020
- Medium5.3SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request.Check if you run itEPSS 1.25%Jul 17, 2020
- High7.2A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode.Check if you run itEPSS 0.92%Dec 31, 2019
- High7.8Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary…Check if you run itEPSS 0.46%Dec 19, 2019
- High7.5SonicWall SMA100 Directory Traversal VulnerabilityPatch nowKEVEPSS 4.01%Dec 18, 2019
- High7.5SonicWall SMA100 SQL Injection VulnerabilityPatch nowKEVEPSS 99.91%Dec 17, 2019