sonicwall Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/sonicwall/ Sun, 26 Feb 2023 06:42:13 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png sonicwall Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/sonicwall/ 32 32 CVE-2020-5146 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5146/ Sun, 26 Feb 2023 06:42:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5146/ A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.

The post CVE-2020-5146 appeared first on CVE Vulnerability.

]]> A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.

The post CVE-2020-5146 appeared first on CVE Vulnerability.

]]> CVE-2019-7481 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7481/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7481/ Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7481 appeared first on CVE Vulnerability.

]]> Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7481 appeared first on CVE Vulnerability.

]]> CVE-2019-7482 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7482/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7482/ Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7482 appeared first on CVE Vulnerability.

]]> Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7482 appeared first on CVE Vulnerability.

]]> CVE-2019-7483 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7483/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7483/ In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

The post CVE-2019-7483 appeared first on CVE Vulnerability.

]]> In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

The post CVE-2019-7483 appeared first on CVE Vulnerability.

]]> CVE-2019-7484 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7484/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7484/ Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7484 appeared first on CVE Vulnerability.

]]> Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7484 appeared first on CVE Vulnerability.

]]> CVE-2019-7485 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7485/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7485/ Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7485 appeared first on CVE Vulnerability.

]]> Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.

The post CVE-2019-7485 appeared first on CVE Vulnerability.

]]> CVE-2019-7486 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7486/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7486/ Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.

The post CVE-2019-7486 appeared first on CVE Vulnerability.

]]> Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.

The post CVE-2019-7486 appeared first on CVE Vulnerability.

]]> CVE-2019-7487 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7487/ Sun, 26 Feb 2023 06:34:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7487/ Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.

The post CVE-2019-7487 appeared first on CVE Vulnerability.

]]> Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.

The post CVE-2019-7487 appeared first on CVE Vulnerability.

]]> CVE-2021-20016 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-20016/ Thu, 23 Feb 2023 14:06:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-20016/ A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

The post CVE-2021-20016 appeared first on CVE Vulnerability.

]]> A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

The post CVE-2021-20016 appeared first on CVE Vulnerability.

]]> CVE-2021-20049 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-20049/ Thu, 23 Feb 2023 14:06:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-20049/ A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.

The post CVE-2021-20049 appeared first on CVE Vulnerability.

]]> A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.

The post CVE-2021-20049 appeared first on CVE Vulnerability.

]]>