Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: SonicWall SMA100 — psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018 Clear all filters
TI-2024-35901 CVE-2024-53703 · GHSA-9m9p-7xr9-44ff

Stack-based buffer overflow in SonicWall SMA100

Priority MEDIUM 51

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.12627 Published 2024-12-05 No fix listed CWE-121
TI-2024-35900 CVE-2024-53702 · GHSA-r2f4-w3vh-wpxj

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the…

Priority LOW 30

Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the gen…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2024-12-05 No fix listed CWE-338
TI-2024-30390 CVE-2024-45319 · GHSA-769g-258x-699h

Hard-coded credentials in SonicWall SMA100

Priority LOW 28

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00234 Published 2024-12-05 No fix listed CWE-798
TI-2024-30389 CVE-2024-45318 · GHSA-xff8-mrv9-vj9c

Stack-based buffer overflow in SonicWall SMA100

Priority LOW 39

A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01036 Published 2024-12-05 No fix listed CWE-121
TI-2024-27149 CVE-2024-40763 · GHSA-x6p6-q78g-6q5q

Heap-based buffer overflow in SonicWall SMA100

Priority LOW 37

Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00944 Published 2024-12-05 No fix listed CWE-122