This page lists publicly disclosed CVE vulnerabilities affecting sonicwall sma_500v (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-20035 KEV | Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS. | [email protected] | 6.5 | 4.18% | 2021-09-27 | 2026-06-16 |
| CVE-2021-20034 | An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. | [email protected] | 9.1 | 80.70% | 2021-09-27 | 2026-06-16 |
| CVE-2021-20016 KEV | A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x. | [email protected] | 9.8 | 40.04% | 2021-02-04 | 2026-06-16 |