Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: SonicWall SMA100 — psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018 Clear all filters
TI-2023-05501 CVE-2023-5970 · GHSA-8w95-32fx-8c6h

Improper authentication in SonicWall SMA100

Priority MEDIUM 40

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00911 Published 2023-12-05 No fix listed CWE-287
TI-2023-23752 CVE-2023-44221 · GHSA-q6mf-v98h-w783

OS command injection in SonicWall SMA100

Priority CRITICAL 91KEV

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially lea…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.7625 Published 2023-12-05 No fix listed CWE-78