SonicWall
19 CVEs in CISA KEV — 13 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-53704 |
SonicOS | — | 0.9531 | 2025-02-18 | 2025-03-11 | RW | SonicWall SonicOS contains an improper authentication vulnerability in the SSLVP |
CVE-2023-44221 |
SMA100 Appliances | — | 0.7625 | 2025-05-01 | 2025-05-22 | SonicWall SMA100 appliances contain an OS command injection vulnerability in the | |
CVE-2025-23006 |
SMA1000 Appliances | — | 0.2343 | 2025-01-24 | 2025-02-14 | RW | SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Cons |
CVE-2024-40766 |
SonicOS | — | 0.1838 | 2024-09-09 | 2024-09-30 | RW | SonicWall SonicOS contains an improper access control vulnerability that could l |
CVE-2026-15410 |
SMA1000 Appliances | 7.2 | 0.1179 | 2026-07-14 | 2026-07-17 | RW | SonicWall SMA1000 Appliances contain a code injection vulnerability which in spe |
CVE-2026-83549 |
SMA1000 Appliances | — | 0.0989 | 2026-09-02 | 2026-09-05 | SonicWall SMA1000 Appliances contains an OS command injection vulnerability that | |
CVE-2026-83548 |
SMA1000 Appliances | — | 0.0804 | 2026-09-02 | 2026-09-05 | SonicWall SMA1000 Appliances contains a server-side request forgery vulnerabilit | |
CVE-2026-15409 |
SMA1000 Appliances | 10.0 | 0.0679 | 2026-07-14 | 2026-07-17 | RW | SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability |
CVE-2025-40602 |
SMA1000 appliance | — | 0.0276 | 2025-12-17 | 2025-12-24 | SonicWall SMA1000 contains a missing authorization vulnerability that could allo | |
CVE-2021-20035 |
SMA100 Appliances | — | — | 2025-04-16 | 2025-05-07 | SonicWall SMA100 appliances contain an OS command injection vulnerability in the | |
CVE-2021-20028 |
Secure Remote Access (SRA) | — | — | 2022-03-28 | 2022-04-18 | RW | SonicWall Secure Remote Access (SRA) products contain an improper neutralization |
CVE-2019-7483 |
SMA100 | — | — | 2022-03-28 | 2022-04-18 | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the | |
CVE-2020-5135 |
SonicOS | — | — | 2022-03-15 | 2022-04-05 | RW | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Den |
CVE-2021-20038 |
SMA 100 Appliances | — | — | 2022-01-28 | 2022-02-11 | RW | SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer |
CVE-2021-20021 |
SonicWall Email Security | — | — | 2021-11-03 | 2021-11-17 | RW | SonicWall Email Security contains an improper privilege management vulnerability |
CVE-2019-7481 |
SMA100 | — | — | 2021-11-03 | 2022-05-03 | RW | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthentica |
CVE-2021-20022 |
SonicWall Email Security | — | — | 2021-11-03 | 2021-11-17 | RW | SonicWall Email Security contains an unrestricted upload of file with dangerous |
CVE-2021-20023 |
SonicWall Email Security | — | — | 2021-11-03 | 2021-11-17 | RW | SonicWall Email Security contains a path traversal vulnerability that allows a p |
CVE-2021-20016 |
SSLVPN SMA100 | — | — | 2021-11-03 | 2021-11-17 | RW | SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remot |