{"resultsPerPage":221,"startIndex":0,"totalResults":221,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-13T11:07:28.107","vulnerabilities":[{"cve":{"id":"CVE-2018-9866","sourceIdentifier":"PSIRT@sonicwall.com","published":"2018-08-03T20:29:00.343","lastModified":"2026-06-17T02:07:18.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier."},{"lang":"es","value":"Una vulnerabilidad en la falta de validación de parámetros proporcionados por el usuario pasados a llamadas XML-RPC en los dispositivos virtuales SonicWall Global Management System (GMS) permite que usuarios remotos ejecuten código arbitrario. Esta vulnerabilidad afecta a GMS en versiones 8.1 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Global Management System (GMS)","versions":[{"version":"8.1 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:31:56.182028Z","id":"CVE-2018-9866","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1","matchCriteriaId":"1C42C07A-7CB7-4B3B-94F0-01EE644B6833"}]}]}],"references":[{"url":"https://github.com/rapid7/metasploit-framework/pull/10305","source":"PSIRT@sonicwall.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0007","source":"PSIRT@sonicwall.com","tags":["Third Party Advisory"]},{"url":"https://twitter.com/ddouhine/status/1019251292202586112","source":"PSIRT@sonicwall.com","tags":["Third Party Advisory"]},{"url":"https://github.com/rapid7/metasploit-framework/pull/10305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://twitter.com/ddouhine/status/1019251292202586112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-9867","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-02-19T21:29:00.320","lastModified":"2026-06-17T02:07:19.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."},{"lang":"es","value":"En SonicWall SonicOS, los administradores sin permisos completos pueden descargar certificados importados. Ocurre cuando los administradores que no están en el grupo de usuarios de SonicWall Administrators intentan descargar certificados importados. Esta vulnerabilidad afectó a SonicOS Gen 5 versión 5.9.1.10 y anteriores, Gen 6 versiones 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o y SonicOSv versiones 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv versión 6.5.0.2.8v_RC368 (AWS), SonicOSv versión 6.5.0.2.8v_RC366 (HYPER_V)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"5.9.1.10 and earlier","status":"affected"},{"version":"6.2.7.3","status":"affected"},{"version":"6.5.1.3","status":"affected"},{"version":"6.5.2.2","status":"affected"},{"version":"6.5.3.1","status":"affected"},{"version":"6.2.7.8","status":"affected"},{"version":"6.4.0.0","status":"affected"},{"version":"6.5.1.8","status":"affected"},{"version":"6.0.5.3-86o","status":"affected"}]},{"vendor":"SonicWall","product":"SonicOSv","versions":[{"version":"6.5.0.2-8v_RC363 (VMWARE)","status":"affected"},{"version":"6.5.0.2.8v_RC367 (AZURE)","status":"affected"},{"version":"6.5.0.2.8v_RC368 (AWS)","status":"affected"},{"version":"6.5.0.2.8v_RC366 (HYPER_V)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0.0","versionEndIncluding":"5.9.1.10","matchCriteriaId":"88AC25CE-9B3C-491B-877E-0BAB68B9CCFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:*:*:*:*:*:*:*","matchCriteriaId":"6064655E-6480-4A34-843C-B29C72527111"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"5567146C-301D-469A-A3E3-1B70D5C9BDCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"A25F675E-CD61-46F0-92A2-218C956E0AD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C30B8BB4-E0A7-4060-8EED-AE7E42811C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"93F31397-0142-439F-BFEC-C77F3D4B7825"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"095E558D-C241-45A4-AA4E-76B3621E341D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACC28FE5-5064-4FEE-8EA0-047C8BA31601"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"248847AC-1910-448A-BA78-DC6BE942407E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:*:*:*:*:vmware:*:*","matchCriteriaId":"D76E63B8-63A0-4283-9BB4-89139E4CADE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:*:*:*:*:hyper_v:*:*","matchCriteriaId":"78C8A7D6-30CB-40E1-BF67-0E660EF62DF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:*:*:*:*:azure:*:*","matchCriteriaId":"0C6F0305-2590-45EB-A0C0-3F2417EF57FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:*:*:*:*:aws:*:*","matchCriteriaId":"DDE650F8-9373-483F-847C-14987A1832E6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-08","source":"PSIRT@sonicwall.com","tags":["Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2019-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-7474","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-04-02T18:30:25.147","lastModified":"2026-06-17T02:40:38.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."},{"lang":"es","value":"Una vulnerabilidad en SonicWall, SonicOS y SonicOSv permite al adiminstrador autenticado de solo lectura dejar el firewall en un estado inestable descargando certificados con una extensión específica. Esta vulnerabilidad afectaba a SonicOS Gen 5, en versiones 5.9.1.10 y anteriores; Gen 6, en versiones 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8 y 6.0.5.3-86o;  en SonicOSv 6.5.0.2.8v_RC368 (AWS) y en SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"5.9.1.10 and earlier","status":"affected"},{"version":"6.2.7.3","status":"affected"},{"version":"6.5.1.3","status":"affected"},{"version":"6.5.2.2","status":"affected"},{"version":"6.5.3.1","status":"affected"},{"version":"6.2.7.8","status":"affected"},{"version":"6.4.0.0","status":"affected"},{"version":"6.5.1.8","status":"affected"},{"version":"6.0.5.3-86o","status":"affected"}]},{"vendor":"SonicWall","product":"SonicOSv","versions":[{"version":"6.5.0.2-8v_RC363 (VMWARE)","status":"affected"},{"version":"6.5.0.2.8v_RC367 (AZURE)","status":"affected"},{"version":"6.5.0.2.8v_RC368 (AWS)","status":"affected"},{"version":"6.5.0.2.8v_RC366 (HYPER_V)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-248"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-755"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.10","matchCriteriaId":"F0180CED-E6E5-4B09-8F73-D373283116AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:*:*:*:*:*:*:*","matchCriteriaId":"6064655E-6480-4A34-843C-B29C72527111"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"5567146C-301D-469A-A3E3-1B70D5C9BDCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"A25F675E-CD61-46F0-92A2-218C956E0AD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C30B8BB4-E0A7-4060-8EED-AE7E42811C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"93F31397-0142-439F-BFEC-C77F3D4B7825"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"095E558D-C241-45A4-AA4E-76B3621E341D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACC28FE5-5064-4FEE-8EA0-047C8BA31601"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"248847AC-1910-448A-BA78-DC6BE942407E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:*:*:*:*:vmware:*:*","matchCriteriaId":"D76E63B8-63A0-4283-9BB4-89139E4CADE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:*:*:*:*:hyper_v:*:*","matchCriteriaId":"78C8A7D6-30CB-40E1-BF67-0E660EF62DF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:*:*:*:*:azure:*:*","matchCriteriaId":"0C6F0305-2590-45EB-A0C0-3F2417EF57FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:*:*:*:*:aws:*:*","matchCriteriaId":"DDE650F8-9373-483F-847C-14987A1832E6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7475","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-04-02T18:30:25.207","lastModified":"2026-06-17T02:40:38.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."},{"lang":"es","value":"Una vulnerabilidad en SonicWall, SonicOS y SonicOSv con un sistema de gestión habilitado o con una configuración específica permite a los usuarios sin privilegios acceder a servicios avanzados de routing. Esta vulnerabilidad afectaba a SonicOS Gen 5, en versiones 5.9.1.10 y anteriores; Gen 6, en versiones 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8 y 6.0.5.3-86o; en SonicOSv 6.5.0.2.8v_RC368 (AWS) y en SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"5.9.1.10 and earlier","status":"affected"},{"version":"6.2.7.3","status":"affected"},{"version":"6.5.1.3","status":"affected"},{"version":"6.5.2.2","status":"affected"},{"version":"6.5.3.1","status":"affected"},{"version":"6.2.7.8","status":"affected"},{"version":"6.4.0.0","status":"affected"},{"version":"6.5.1.8","status":"affected"},{"version":"6.0.5.3-86o","status":"affected"}]},{"vendor":"SonicWall","product":"SonicOSv","versions":[{"version":"6.5.0.2-8v_RC363 (VMWARE)","status":"affected"},{"version":"6.5.0.2.8v_RC367 (AZURE)","status":"affected"},{"version":"6.5.0.2.8v_RC368 (AWS)","status":"affected"},{"version":"6.5.0.2.8v_RC366 (HYPER_V)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.10","matchCriteriaId":"F0180CED-E6E5-4B09-8F73-D373283116AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:*:*:*:*:*:*:*","matchCriteriaId":"6064655E-6480-4A34-843C-B29C72527111"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"5567146C-301D-469A-A3E3-1B70D5C9BDCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"A25F675E-CD61-46F0-92A2-218C956E0AD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C30B8BB4-E0A7-4060-8EED-AE7E42811C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"93F31397-0142-439F-BFEC-C77F3D4B7825"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"095E558D-C241-45A4-AA4E-76B3621E341D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACC28FE5-5064-4FEE-8EA0-047C8BA31601"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"248847AC-1910-448A-BA78-DC6BE942407E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:*:*:*:*:vmware:*:*","matchCriteriaId":"D76E63B8-63A0-4283-9BB4-89139E4CADE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:*:*:*:*:hyper_v:*:*","matchCriteriaId":"78C8A7D6-30CB-40E1-BF67-0E660EF62DF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:*:*:*:*:azure:*:*","matchCriteriaId":"0C6F0305-2590-45EB-A0C0-3F2417EF57FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:*:*:*:*:aws:*:*","matchCriteriaId":"DDE650F8-9373-483F-847C-14987A1832E6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0002","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7477","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-04-02T18:30:25.257","lastModified":"2026-06-17T02:40:38.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."},{"lang":"es","value":"Una vulnerabilidad en el cifrado TLS CBC de SonicWall, SonicOS y SonicOSv permite que los atacantes remotos obtengan datos sensibles de texto plano cuando se habilitan las suites de cifrado CBC. Esta vulnerabilidad afectaba a SonicOS Gen 5, en versiones 5.9.1.10 y anteriores; Gen 6, en versiones 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8 y 6.0.5.3-86o;  en SonicOSv 6.5.0.2.8v_RC368 (AWS) y en SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"5.9.1.10 and earlier","status":"affected"},{"version":"6.2.7.3","status":"affected"},{"version":"6.5.1.3","status":"affected"},{"version":"6.5.2.2","status":"affected"},{"version":"6.5.3.1","status":"affected"},{"version":"6.2.7.8","status":"affected"},{"version":"6.4.0.0","status":"affected"},{"version":"6.5.1.8","status":"affected"},{"version":"6.0.5.3-86o","status":"affected"}]},{"vendor":"SonicWall","product":"SonicOSv","versions":[{"version":"6.5.0.2-8v_RC363 (VMWARE)","status":"affected"},{"version":"6.5.0.2.8v_RC367 (AZURE)","status":"affected"},{"version":"6.5.0.2.8v_RC368 (AWS)","status":"affected"},{"version":"6.5.0.2.8v_RC366 (HYPER_V)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.10","matchCriteriaId":"F0180CED-E6E5-4B09-8F73-D373283116AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.0.5.3-86o:*:*:*:*:*:*:*","matchCriteriaId":"6064655E-6480-4A34-843C-B29C72527111"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"5567146C-301D-469A-A3E3-1B70D5C9BDCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"A25F675E-CD61-46F0-92A2-218C956E0AD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C30B8BB4-E0A7-4060-8EED-AE7E42811C86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"93F31397-0142-439F-BFEC-C77F3D4B7825"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"095E558D-C241-45A4-AA4E-76B3621E341D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACC28FE5-5064-4FEE-8EA0-047C8BA31601"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"248847AC-1910-448A-BA78-DC6BE942407E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2-8v_rc363:*:*:*:*:vmware:*:*","matchCriteriaId":"D76E63B8-63A0-4283-9BB4-89139E4CADE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc366:*:*:*:*:hyper_v:*:*","matchCriteriaId":"78C8A7D6-30CB-40E1-BF67-0E660EF62DF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc367:*:*:*:*:azure:*:*","matchCriteriaId":"0C6F0305-2590-45EB-A0C0-3F2417EF57FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v_rc368:*:*:*:*:aws:*:*","matchCriteriaId":"DDE650F8-9373-483F-847C-14987A1832E6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7476","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-04-26T21:29:00.487","lastModified":"2026-06-17T02:40:38.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier."},{"lang":"es","value":"Una vulnerabilidad en SonicWall Global Management System (GMS) permite a un atacante remoto obtener acceso empleando una clave SSH existente. Esta vulnerabilidad afecta las versiones de GMS 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Global Management System (GMS)","versions":[{"version":"9.1","status":"affected"},{"version":"9.0","status":"affected"},{"version":"8.7","status":"affected"},{"version":"8.6","status":"affected"},{"version":"8.4","status":"affected"},{"version":"8.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1188"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3","matchCriteriaId":"AFFEBF80-7249-4CA6-A6C0-6F6329152FF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.4:*:*:*:*:*:*:*","matchCriteriaId":"DD7682E7-0BD5-440C-ABA4-4054D093A57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.6:*:*:*:*:*:*:*","matchCriteriaId":"431CAC0A-9915-4D07-A22D-4D674ACC7DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.7:*:*:*:*:*:*:*","matchCriteriaId":"DBD3B183-8BA1-4021-882B-C06ED1C39D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.0:*:*:*:*:*:*:*","matchCriteriaId":"8110BA2E-3C68-4C91-BD84-1E2E53AB31AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCAD1F4-A32A-41FD-B3F6-418625A9179C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7481","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-17T23:15:14.923","lastModified":"2026-08-12T05:17:26.930","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier."},{"lang":"es","value":"Una vulnerabilidad en SonicWall SMA100, permite a usuarios no autenticados conseguir acceso de solo lectura a recursos no autorizados. Esta vulnerabilidad impacta a SMA100 versión 9.0.0.3 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2021-10-26T00:00:00+00:00","id":"CVE-2019-7481","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall SMA100 SQL Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.4","matchCriteriaId":"19763ABF-9FC5-4A4C-B321-0AC0A0341D41"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0016","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7481","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2019-7482","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-19T01:15:10.680","lastModified":"2026-06-17T02:40:38.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en SonicWall SMA100, permite a un usuario no autenticado ejecutar código arbitrario en la función libSys.so. Esta vulnerabilidad impactó a SMA100 versión 9.0.0.3 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.3","matchCriteriaId":"B5EF6331-01A9-4DAD-8896-D90470116EA5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0017","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7483","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-19T01:15:10.803","lastModified":"2026-06-17T02:40:39.057","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server."},{"lang":"es","value":"En SonicWall SMA100, una vulnerabilidad de Salto de Directorio no autenticada en el handleWAFRedirect CGI permite al usuario probar la presencia de un archivo en el servidor."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-06T19:56:05.873481Z","id":"CVE-2019-7483","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-28","cisaActionDue":"2022-04-18","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall SMA100 Directory Traversal Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.4","matchCriteriaId":"19763ABF-9FC5-4A4C-B321-0AC0A0341D41"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7483","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2019-7484","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-19T01:15:10.883","lastModified":"2026-06-17T02:40:39.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier."},{"lang":"es","value":"Una inyección SQL autenticada en SonicWall SMA100, permite al usuario conseguir acceso de solo lectura a recursos no autorizados utilizando el script viewcacert CGI. Esta vulnerabilidad impactó a SMA100 versión 9.0.0.3 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.3","matchCriteriaId":"B5EF6331-01A9-4DAD-8896-D90470116EA5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0019","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7485","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-19T01:15:10.977","lastModified":"2026-06-17T02:40:39.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier."},{"lang":"es","value":"Un desbordamiento de búfer en SonicWall SMA100, permite a un usuario autenticado ejecutar código arbitrario en el script DEARegister CGI. Esta vulnerabilidad impactó a SMA100 versión 9.0.0.3 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.3","matchCriteriaId":"B5EF6331-01A9-4DAD-8896-D90470116EA5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0020","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7486","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-19T01:15:11.053","lastModified":"2026-06-17T02:40:39.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier."},{"lang":"es","value":"Una inyección de código en SonicWall SMA100, permite a un usuario autenticado ejecutar código arbitrario en el script viewcacert CGI. Esta vulnerabilidad impactó a SMA100 versión 9.0.0.4 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.4 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.4","matchCriteriaId":"B2121425-13A0-4872-9FA2-9BABB9963EC9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7487","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-19T01:15:11.133","lastModified":"2026-06-17T02:40:39.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution."},{"lang":"es","value":"La instalación de SonicOS SSLVPN NACagent versión 3.5 en el sistema operativo Windows, un valor autorun se crea sin poner la ruta entre comillas, por lo que si un binario malicioso se introduce en la ruta principal por parte de un atacante, podría permitir una ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"6.5.3.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-428"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-428"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.3.3","matchCriteriaId":"83EB3E0C-43F1-4C3C-9B1D-40F2F0FB3C6C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sonicos_sslvpn_nacagent:3.5:*:*:*:*:*:*:*","matchCriteriaId":"AA6C0F7B-0302-4EC1-8B88-27DA8DD4B1DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0022","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7488","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-23T22:15:11.407","lastModified":"2026-06-17T02:40:39.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier."},{"lang":"es","value":"Una contraseña predeterminada débil causa vulnerabilidad en el dispositivo SonicWall Email Security, lo que conlleva al atacante a conseguir acceso a la base de datos del dispositivo. Esta vulnerabilidad afectó a Email Security Appliance versión 10.0.2 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security Appliance","versions":[{"version":"10.0.2 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-255"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-521"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.2","matchCriteriaId":"E2B88C2D-D8CC-43B3-9800-99AF1298AEE3"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7489","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-23T22:15:11.483","lastModified":"2026-06-17T02:40:39.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier."},{"lang":"es","value":"Una vulnerabilidad en el dispositivo SonicWall Email Security, permite a un usuario no autenticado llevar a cabo una ejecución de código remota. Esta vulnerabilidad afectó a Email Security Appliance versión 10.0.2 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security Appliance","versions":[{"version":"10.0.2 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.2","matchCriteriaId":"E2B88C2D-D8CC-43B3-9800-99AF1298AEE3"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0023","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7478","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-31T00:15:13.400","lastModified":"2026-06-17T02:40:38.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1."},{"lang":"es","value":"Una vulnerabilidad en GMS permite una inyección de SQL a usuarios no autenticados en el módulo de servicio web. Esta vulnerabilidad afectó a GMS versiones GMS 8.4, 8.5, 8.6, 8.7, 9.0 y 9.1."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","versions":[{"version":"GMS 8.4","status":"affected"},{"version":"GMS 8.5","status":"affected"},{"version":"GMS 8.6","status":"affected"},{"version":"GMS 8.7","status":"affected"},{"version":"GMS 9.0","status":"affected"},{"version":"GMS 9.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.4:*:*:*:*:*:*:*","matchCriteriaId":"DD7682E7-0BD5-440C-ABA4-4054D093A57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.5:*:*:*:*:*:*:*","matchCriteriaId":"697FE8A0-619E-49AB-9B94-929DE1523781"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.6:*:*:*:*:*:*:*","matchCriteriaId":"431CAC0A-9915-4D07-A22D-4D674ACC7DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:8.7:*:*:*:*:*:*:*","matchCriteriaId":"DBD3B183-8BA1-4021-882B-C06ED1C39D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.0:*:*:*:*:*:*:*","matchCriteriaId":"8110BA2E-3C68-4C91-BD84-1E2E53AB31AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.1:*:*:*:*:*:*:*","matchCriteriaId":"8CCAD1F4-A32A-41FD-B3F6-418625A9179C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-7479","sourceIdentifier":"PSIRT@sonicwall.com","published":"2019-12-31T02:15:10.710","lastModified":"2026-06-17T02:40:38.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V)."},{"lang":"es","value":"Una vulnerabilidad en SonicOS permite que un administrador de solo lectura autenticado pueda elevar los permisos en modo de configuración. Esta vulnerabilidad afectó a SonicOS Gen 5 versión 5.9.1.12-4o y anteriores, Gen 6 versión 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4. 1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n y SonicOSv versión 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv versión 6.5.0.2. 8v_RC366 (HYPER_V)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"5.9.1.12-4o","status":"affected"},{"version":"6.2.7.4-32n","status":"affected"},{"version":"6.5.1.4-4n","status":"affected"},{"version":"6.5.2.3-4n","status":"affected"},{"version":"6.5.3.3-3n","status":"affected"},{"version":"6.2.7.10-3n","status":"affected"},{"version":"6.4.1.0-3n","status":"affected"},{"version":"6.5.1.9-4n","status":"affected"}]},{"vendor":"SonicWall","product":"SonicOSv","versions":[{"version":"6.5.0.2-8v_RC363 (VMWARE)","status":"affected"},{"version":"6.5.0.2.8v_RC367 (AZURE)","status":"affected"},{"version":"6.5.0.2.8v_RC368 (AWS)","status":"affected"},{"version":"6.5.0.2.8v_RC366 (HYPER_V)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.12-4o","matchCriteriaId":"62BC517C-4BA4-4D24-AF37-2FE354DCA3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.4-32n:*:*:*:*:*:*:*","matchCriteriaId":"AFA04B64-0DA3-4076-A186-2F258F5D14FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.2.7.10-3n:*:*:*:*:*:*:*","matchCriteriaId":"7365C8A2-F8E1-4DE0-B90B-0F2AC7AFC43D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.4.1.0-3n:*:*:*:*:*:*:*","matchCriteriaId":"3D43E2BE-498C-4381-BFD6-6568C87A03E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.4-4n:*:*:*:*:*:*:*","matchCriteriaId":"E28195F5-7991-4E1A-9BE9-79C099A0C861"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.9-4n:*:*:*:*:*:*:*","matchCriteriaId":"01BBACC9-F422-409D-940C-906D28EC1ACA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.2.3-4n:*:*:*:*:*:*:*","matchCriteriaId":"5F97116C-82E9-4574-8566-B88DFD312200"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.3.3-3n:*:*:*:*:*:*:*","matchCriteriaId":"3797E36F-8DF2-4877-A188-891B13956008"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v:*:*:*:*:*:*:*","matchCriteriaId":"DB0AAA39-58B7-4A37-8ED4-686449F78646"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v:rc363:*:*:*:*:*:*","matchCriteriaId":"383D9E6C-9062-4007-9DDD-BCA01ABBC3CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v:rc366:*:*:*:*:*:*","matchCriteriaId":"E243FA37-F3C3-45DC-9318-D2A6B2858A6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v:rc367:*:*:*:*:*:*","matchCriteriaId":"C9435A4D-9AC1-44D9-9C41-24D8F7729C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.0.2.8v:rc368:*:*:*:*:*:*","matchCriteriaId":"3A6AA5A9-B5DA-4CF0-ACA5-6E79180CBDE5"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5129","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-03-26T13:15:13.327","lastModified":"2026-06-17T03:20:56.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected SMA1000 Version 12.1.0-06411 and earlier."},{"lang":"es","value":"Una vulnerabilidad en el servidor SonicWall SMA1000 HTTP Extraweb, permite a un atacante remoto no autenticado causar un bloqueo del servidor HTTP que conlleva a una denegación de servicio. Esta vulnerabilidad afectó a SMA1000 Versión 12.1.0-06411 y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","versions":[{"version":"12.1.0-06411 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-248"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-444"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma1000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"12.1.0-06411","matchCriteriaId":"90AEA8F2-BCF9-4FFD-B201-D18BB1D1744C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma1000:-:*:*:*:*:*:*:*","matchCriteriaId":"DB78952C-B6BB-4A5A-A216-BA64AAC83D4D"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0002","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5130","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-07-17T18:15:12.893","lastModified":"2026-06-17T03:20:56.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier."},{"lang":"es","value":"La petición de inicio de sesión de SonicOS SSLVPN LDAP, permite a atacantes remotos causar una interacción de servicio externo (DNS) debido a una comprobación inapropiada de la petición. Esta vulnerabilidad impacta a SonicOS versión 6.5.4.4-44n y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"6.5.4.4-44n and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4-44n","matchCriteriaId":"BF4E399A-9E54-453C-9527-F19FBA110D2D"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5131","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-07-17T18:15:12.973","lastModified":"2026-06-17T03:20:57.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier."},{"lang":"es","value":"El cliente de SonicWall NetExtender Windows es susceptible a una vulnerabilidad de escritura arbitraria de archivos, esto permite al atacante sobrescribir una DLL y ejecutar código con el mismo privilegio en el sistema operativo host. Esta vulnerabilidad impacta al cliente SonicWall NetExtender Windows versión 9.0.815 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall NetExtender","versions":[{"version":"9.0.815 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"9.0.815","matchCriteriaId":"F49E513A-6A4C-48E1-87E2-41BAFFF5F095"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5132","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-09-30T06:15:12.953","lastModified":"2026-06-17T03:20:57.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability."},{"lang":"es","value":"Los productos SonicWall SSL-VPN y una configuración inapropiada de la funcionalidad SSL-VPN del firewall SonicWall, conlleva a un posible fallo de DNS conocido como vulnerabilidad de colisión de nombres de dominio. Cuando los usuarios muestran públicamente los nombres de dominio internos de su organización en la página de autenticación SSL-VPN, un atacante con conocimiento de los nombres de dominio internos puede potencialmente aprovecharse de esta vulnerabilidad"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"SMA100 10.2.0.2-20sv","status":"affected"}]},{"vendor":"SonicWall","product":"SMA1000","versions":[{"version":"SMA1000 12.4.0-2223","status":"affected"}]},{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.6-79n","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma100_firmware:10.2.0.2-20sv:*:*:*:*:*:*:*","matchCriteriaId":"52EC8D49-2710-466B-B2A1-62295FB4A086"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma100_firmware:12.4.0-2223:*:*:*:*:*:*:*","matchCriteriaId":"4C8C94C2-E31A-4D7E-A5FF-D5042AC52E53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.4.6-79n:*:*:*:*:*:*:*","matchCriteriaId":"F773C54E-BA13-442C-96FF-1EF6E0055295"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0006","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5133","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.530","lastModified":"2026-06-17T03:20:57.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad en SonicOS, permite a un atacante remoto no autenticado causar una denegación de servicio debido a un desbordamiento del búfer, lo que conlleva a un bloqueo del firewall. Esta vulnerabilidad afectó a SonicOS Gen 6 versiones 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5134","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.687","lastModified":"2026-06-17T03:20:57.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad en SonicOS, permite a un atacante autenticado causar una referencia de archivos no válidos fuera del límite que causan un bloqueo del firewall. Esta vulnerabilidad afectó a SonicOS Gen 6 versiones 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5.3","matchCriteriaId":"3937590E-0915-4FA8-AE69-A5197A839931"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0009","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5135","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.747","lastModified":"2026-06-17T03:20:57.470","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento del búfer en SonicOS, permite a un atacante remoto causar una Denegación de servicio (DoS) y ejecutar potencialmente código arbitrario mediante el envío de una petición maliciosa al firewall. Esta vulnerabilidad afectó a SonicOS Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-06T19:55:08.576470Z","id":"CVE-2020-5135","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-15","cisaActionDue":"2022-04-05","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall SonicOS Buffer Overflow Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5.3","matchCriteriaId":"3937590E-0915-4FA8-AE69-A5197A839931"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-5135","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2020-5136","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.827","lastModified":"2026-06-17T03:20:57.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento del búfer en SonicOS, permite a un atacante autenticado causar una Denegación de Servicio (DoS) en el portal de SSL-VPN y virtual assist, lo que conlleva a un bloqueo del firewall. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5137","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.890","lastModified":"2026-06-17T03:20:57.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento del búfer en SonicOS, permite a un atacante remoto no autenticado causar una Denegación de Servicio (DoS) en el servicio SSLVPN del firewall y conlleva a un bloqueo del firewall. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5138","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.950","lastModified":"2026-06-17T03:20:57.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad de Desbordamiento de Pila en SonicOS, permite a un atacante remoto no autenticado causar una Denegación de Servicio (DoS) en el servicio SSLVPN del firewall y conlleva a un bloqueo de SonicOS. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y SonicOS Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0013","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5139","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:12.997","lastModified":"2026-06-17T03:20:57.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad en el servicio SSLVPN de SonicOS, permite a un atacante remoto no autenticado causar una Denegación de servicio (DoS) debido a un lanzamiento de un puntero no válido y conlleva a un bloqueo del firewall. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y SonicOS Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-763"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-763"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5140","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:13.060","lastModified":"2026-06-17T03:20:58.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad en SonicOS, permite a un atacante remoto no autenticado causar una denegación de servicio (DoS) en el servicio SSLVPN del firewall mediante el envío de una petición HTTP maliciosa que conlleva a un filtrado de direcciones de la memoria. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y SonicOS Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0015","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5141","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:13.123","lastModified":"2026-06-17T03:20:58.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0."},{"lang":"es","value":"Una vulnerabilidad en SonicOS, permite a un atacante remoto no autenticado usar fuerza bruta en el ID de ticket de Virtual Assist en el servicio SSLVPN del firewall. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y SonicOS Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-799"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0016","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5142","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:13.187","lastModified":"2026-06-17T03:20:58.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0."},{"lang":"es","value":"Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en la interfaz web SSLVPN de SonicOS. Un atacante remoto no autenticado puede almacenar y potencialmente ejecutar código JavaScript arbitrario en el portal SSLVPN del firewall. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y SonicOS Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0017","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5143","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-12T11:15:13.247","lastModified":"2026-06-17T03:20:58.360","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0."},{"lang":"es","value":"Una página de inicio de sesión SSLVPN de SonicOS, permite a un atacante remoto no autenticado llevar a cabo una enumeración de nombres de usuario administrador de la gestión del firewall basada en las respuestas del servidor. Esta vulnerabilidad afectó a SonicOS Gen 5 versiones 5.9.1.7, 5.9.1.13, Gen 6 versiones 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv versión 6.5.4.v y SonicOS Gen 7 versión 7.0.0.0"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.7-79n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.7-2n and earlier","status":"affected"},{"version":"SonicOS 5.9.1.13-5n and earlier","status":"affected"},{"version":"SonicOS 6.5.1.11-4n and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3-93o and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-794 and earlier","status":"affected"},{"version":"SonicOS 7.0.0.0-1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.5.3","matchCriteriaId":"0A2C8637-5089-4B5A-8458-67D097CF5BEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0.0","versionEndIncluding":"6.5.1.11","matchCriteriaId":"08DF961E-08DD-47EC-9AB1-3A3FF79E1F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.4.0","versionEndIncluding":"6.5.4.7","matchCriteriaId":"8302038F-FA49-4CF2-B064-3EE1103B99F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"05C0300F-44AB-482C-BA6D-B9F2ED77037A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4","matchCriteriaId":"8BBB86A1-803B-4B76-BF3D-4A9BCC5AD302"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5144","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-28T11:15:12.100","lastModified":"2026-06-17T03:20:58.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability."},{"lang":"es","value":"Un cliente de SonicWall Global VPN versiones 4.10.4.0314 y anteriores, permite a usuarios de Windows sin privilegios escalar privilegios a SYSTEM por medio de una vulnerabilidad de secuestro de un proceso cargado"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Global VPN Client","versions":[{"version":"4.10.4.0314 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.4.0314","matchCriteriaId":"C24D47A1-7E1A-4D13-8385-800AEE1DDA99"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0020","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5145","sourceIdentifier":"PSIRT@sonicwall.com","published":"2020-10-28T11:15:12.270","lastModified":"2026-06-17T03:20:58.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system."},{"lang":"es","value":"Un cliente SonicWall Global VPN versiones 4.10.4.0314 y anteriores, presenta una vulnerabilidad de carga de biblioteca no segura (secuestro de DLL). La explotación con éxito podría conllevar a una ejecución de código remota en el sistema objetivo"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Global VPN Client","versions":[{"version":"4.10.4.0314 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.4.0314","matchCriteriaId":"C24D47A1-7E1A-4D13-8385-800AEE1DDA99"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5146","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-01-09T01:15:12.947","lastModified":"2026-06-17T03:20:58.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier."},{"lang":"es","value":"Una vulnerabilidad en el dispositivo SonicWall SMA100, permite a un usuario de administración autenticado llevar a cabo una inyección de comandos del Sistema Operativo usando parámetros HTTP POST. Esta vulnerabilidad afectó a SMA100 Appliance versiones 10.2.0.2-20sv y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"10.2.0.2-20sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.0.2-20sv","matchCriteriaId":"906F71D5-168C-4406-A240-42B5A0A9ED34"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0022","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-5147","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-01-09T01:15:13.057","lastModified":"2026-06-17T03:20:58.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier."},{"lang":"es","value":"El cliente SonicWall NetExtender Windows es susceptible a una vulnerabilidad ruta de servicio sin comillas, esto permite a un atacante local alcanzar privilegios elevados en el sistema operativo host. Esta vulnerabilidad afecta al cliente SonicWall NetExtender Windows versiones 10.2.300 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall NetExtender","versions":[{"version":"10.2.300 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-428"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-428"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"10.2.300","matchCriteriaId":"ACC224F3-07B3-4111-AD4D-A16F65ACA683"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html","source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20016","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-02-04T06:15:13.817","lastModified":"2026-08-12T05:17:33.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x."},{"lang":"es","value":"Una vulnerabilidad de inyección de SQL en el producto SonicWall SSLVPN SMA100, permite a un atacante remoto no autenticado llevar a cabo una consulta SQL para acceder a la contraseña del nombre de usuario y otra información relacionada con la sesión. Esta vulnerabilidad afecta a la versión 10.x de la compilación SMA100"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"SMA100 build version 10.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2021-02-05T00:00:00+00:00","id":"CVE-2021-20016","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2021-11-17","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0.0","versionEndExcluding":"10.2.0.5-d-29sv","matchCriteriaId":"5ED4CBFD-C82D-4CA3-8A15-4A461A432A81"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9B74D223-A74B-42EE-A005-C07CC2A1F92C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"69495233-D283-414C-A32C-9FBAF726CF1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"E791012D-4096-4978-950A-5B482F714A47"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"852AF172-A8E4-463B-8503-F31DD0E62BC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"75DB297F-6686-46CD-83D4-608013568D81"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001","source":"PSIRT@sonicwall.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20016","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2020-5148","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-03-05T04:15:12.297","lastModified":"2026-06-17T03:20:58.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewall access controls."},{"lang":"es","value":"La configuración predeterminada del SSO-agent de SonicWall usa NetAPI para sondear las IP asociadas en la red, este método de sondeo del cliente permite a un atacante potencial capturar el hash de contraseña del usuario privilegiado y potencialmente forza al SSO Agent a autenticarse, lo que permite a un atacante eludir los controles de acceso del firewall"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Directory Services Connector","versions":[{"version":"4.1.17 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:directory_services_connector:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.19","matchCriteriaId":"3145DD01-8570-4F69-9629-8A5D13C84C7A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20017","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-03-13T02:15:12.563","lastModified":"2026-06-17T03:33:09.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos posterior a la autenticación en SonicWall SMA100, permite a un atacante autenticado ejecutar comandos del Sistema Operativo como un usuario \"nobody\". Esta vulnerabilidad afecta a SMA100 versiones 10.2.0.5 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"10.2.0.5 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.0.5","matchCriteriaId":"CDC143C4-3155-4DEF-9D80-BE14FD2295E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20018","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-03-13T02:15:12.783","lastModified":"2026-06-17T03:33:09.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier."},{"lang":"es","value":"Una vulnerabilidad posterior a una autenticación en SonicWall SMA100, permite a un atacante exportar el archivo de configuración a la dirección de correo electrónico especificada. Esta vulnerabilidad afecta a SMA100 versiones 10.2.0.5 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"10.2.0.5 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.0.5","matchCriteriaId":"CDC143C4-3155-4DEF-9D80-BE14FD2295E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20021","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-04-09T18:15:13.380","lastModified":"2026-08-12T05:17:33.710","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host."},{"lang":"es","value":"Una vulnerabilidad en SonicWall Email Security versión 10.0.9.x, permite a un atacante crear una cuenta administrativa mediante el envío de una petición HTTP diseñada en el host remoto"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","versions":[{"version":"10.0.9 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2021-04-20T00:00:00+00:00","id":"CVE-2021-20021","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2021-11-17","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall Email Security Improper Privilege Management Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6103","matchCriteriaId":"08AD853A-995F-435D-B2AC-A7A0745D6172"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"A06452B5-695F-4CD8-BB72-AFFB9C4BAA2B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*","matchCriteriaId":"C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"AA584C94-2321-4BBC-9FCD-D7C13C57F1DA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*","matchCriteriaId":"ECF2B5A6-B62F-444E-BDB3-0084896CD83B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"8C3C3AB8-E169-4DAD-AB81-2A7D54EB2CB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*","matchCriteriaId":"A18DCCAF-A373-4550-805B-EF329643B068"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"866762BF-F65B-4C9C-A08E-1F25041576AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"DC5803B4-57F1-4F0C-A459-F367F56AFE16"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"53641CB5-CC2E-4C12-9125-64DCE99F0838"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"BA9126B7-5C64-4692-954C-6EF71261862C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"113E3915-7EF3-42CA-8429-5310EA631DF1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"A114E829-5FC6-4321-8D28-C63EC09F9099"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"4803B3D7-E19F-4EE2-86BC-1DBA18A7E5E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*","matchCriteriaId":"271F06DD-8DAA-46EF-A803-659EA253CC63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"75D58601-90F8-4501-9FD0-FA1E1E9DB546"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*","matchCriteriaId":"443B635B-6B08-479B-A635-26724B192BF0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"7A32D7D5-3EC7-4F6E-9C24-EDCFF7EC5E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6103","matchCriteriaId":"D1824412-5A4F-4D69-996E-D4B3E813D21C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20021","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2021-20022","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-04-09T18:15:13.460","lastModified":"2026-10-01T21:17:15.817","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host."},{"lang":"es","value":"SonicWall Email Security versión 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente cargar un archivo arbitrario en el host remoto"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","versions":[{"version":"10.0.9 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T03:55:23.619977Z","id":"CVE-2021-20022","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2021-11-17","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall Email Security Unrestricted Upload of File Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6103","matchCriteriaId":"08AD853A-995F-435D-B2AC-A7A0745D6172"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"A06452B5-695F-4CD8-BB72-AFFB9C4BAA2B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*","matchCriteriaId":"C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"AA584C94-2321-4BBC-9FCD-D7C13C57F1DA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*","matchCriteriaId":"ECF2B5A6-B62F-444E-BDB3-0084896CD83B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"8C3C3AB8-E169-4DAD-AB81-2A7D54EB2CB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*","matchCriteriaId":"A18DCCAF-A373-4550-805B-EF329643B068"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"866762BF-F65B-4C9C-A08E-1F25041576AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"DC5803B4-57F1-4F0C-A459-F367F56AFE16"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"53641CB5-CC2E-4C12-9125-64DCE99F0838"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"BA9126B7-5C64-4692-954C-6EF71261862C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"113E3915-7EF3-42CA-8429-5310EA631DF1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"A114E829-5FC6-4321-8D28-C63EC09F9099"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"4803B3D7-E19F-4EE2-86BC-1DBA18A7E5E6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*","matchCriteriaId":"271F06DD-8DAA-46EF-A803-659EA253CC63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"75D58601-90F8-4501-9FD0-FA1E1E9DB546"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*","matchCriteriaId":"443B635B-6B08-479B-A635-26724B192BF0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6105","matchCriteriaId":"7A32D7D5-3EC7-4F6E-9C24-EDCFF7EC5E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6103","matchCriteriaId":"D1824412-5A4F-4D69-996E-D4B3E813D21C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20022","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2021-20020","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-04-10T07:15:10.503","lastModified":"2026-06-17T03:33:09.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en SonicWall GMS versión 9.3, permite a un atacante remoto no autenticado escalar localmente privilegios a root"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Global Management System (GMS)","versions":[{"version":"9.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3:*:*:*:*:*:*:*","matchCriteriaId":"FA9DA0AC-1F4D-40E8-9C54-D583AE09F57C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0009","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20023","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-04-20T12:15:12.587","lastModified":"2026-10-01T21:17:16.097","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host."},{"lang":"es","value":"SonicWall Email Security versión 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente leer un archivo arbitrario en el host remoto"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","versions":[{"version":"10.0.9 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T03:55:24.717669Z","id":"CVE-2021-20023","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2021-11-17","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall Email Security Path Traversal Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6173","matchCriteriaId":"5EA2AE41-BCD4-4F77-8883-D201C1AFD110"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"0A418BFA-C4E6-4473-9740-794107F86084"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*","matchCriteriaId":"C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"28AF18A3-3E72-400A-81A3-E0D32D550FC1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*","matchCriteriaId":"ECF2B5A6-B62F-444E-BDB3-0084896CD83B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"738196AF-ECBE-4AC2-914E-1DCF74DFD6A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*","matchCriteriaId":"A18DCCAF-A373-4550-805B-EF329643B068"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"4667576A-993F-4622-B7AC-AC62DD6EFDFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"DC5803B4-57F1-4F0C-A459-F367F56AFE16"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"848AD231-F47D-49E3-B10B-5247240191EA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"BA9126B7-5C64-4692-954C-6EF71261862C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"9908D0F6-1D47-4C2B-B546-3B5614EB827F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"A114E829-5FC6-4321-8D28-C63EC09F9099"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"AD7A6C11-2167-4294-97E9-C467EE9E1B78"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*","matchCriteriaId":"271F06DD-8DAA-46EF-A803-659EA253CC63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"B6220761-AC7E-42BD-A028-CC12EE9B3430"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*","matchCriteriaId":"443B635B-6B08-479B-A635-26724B192BF0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6177","matchCriteriaId":"27799885-B16C-4B14-A780-54E7E20B6CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.9.6173","matchCriteriaId":"DCFC13F9-2DE3-412F-8C8B-847C81811B11"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20023","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2021-20025","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-05-13T15:15:07.653","lastModified":"2026-06-17T03:33:10.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall."},{"lang":"es","value":"SonicWall Email Security Virtual Appliance versión 10.0.9 y versiones anteriores, contienen un nombre de usuario y una contraseña predeterminada que es utilizada en la configuración inicial. Un atacante podría explotar esta cuenta de usuario transitional/temporary del dominio confiable para acceder a la Aplicación Virtual remotamente solo cuando el dispositivo esté recién instalado y no esté conectado a Mysonicwall"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security Virtual Appliance","versions":[{"version":"10.0.9 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.9","matchCriteriaId":"C0C2FFE7-1B84-4056-8CA8-73975FB424A1"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20026","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-05-27T19:15:08.283","lastModified":"2026-06-17T03:33:10.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions."},{"lang":"es","value":"Una vulnerabilidad en el producto SonicWall NSM On-Prem, permite a un atacante autenticado llevar a cabo una inyección de comandos del Sistema Operativo usando una petición HTTP diseñada. Esta vulnerabilidad afecta a NSM On-Prem versiones 2.2.0-R10 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall NSM On-Prem","versions":[{"version":"NSM On-Prem 2.2.0-R10 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:network_security_manager:*:*:*:*:on-premises:*:*:*","versionEndExcluding":"2.2.0","matchCriteriaId":"1434B507-F24C-4ADA-BBBD-99B082365C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:network_security_manager:2.2.0:-:*:*:on-premises:*:*:*","matchCriteriaId":"316964C1-E1E7-46A8-BE2A-886BAB648FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:network_security_manager:2.2.0:r10:*:*:on-premises:*:*:*","matchCriteriaId":"D3B6E8A8-3AA1-41B7-B40D-9C19EB1BBFA5"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20027","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-06-14T23:15:07.473","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en SonicOS permite a un atacante remoto causar una denegación de servicio (DoS) mediante el envío de una petición especialmente diseñada. Esta vulnerabilidad afecta a las plataformas SonicOS Gen5, Gen6, Gen7 y a los firewalls virtuales SonicOSv"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 5.9.1.13 and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4 and earlier","status":"affected"},{"version":"SonicOS 6.0.5.3 and earlier","status":"affected"},{"version":"SonicOS 6.5.1.12 and earlier","status":"affected"},{"version":"SonicOS 6.5.4.7 and earlier","status":"affected"},{"version":"SonicOS 7.0.1-R1219 and earlier","status":"affected"},{"version":"SonicOS 7.0.1-R514 and earlier","status":"affected"},{"version":"SonicOS 7.0.1-R1262 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r1262","matchCriteriaId":"7177725D-324A-49F2-B8CA-F20245917932"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r.1219","matchCriteriaId":"B939069E-6F95-46F5-8826-85074359CBDD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r514","matchCriteriaId":"6D4784A3-3EB7-4F2B-AAFF-3699BEB9D8E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1.12","matchCriteriaId":"B0A5E010-6867-4F79-8F9E-674DED854580"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.7","matchCriteriaId":"CD1E5890-88A6-4932-B077-9A2BA77D74FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"2D5A68BC-42AF-4F5A-8519-DCD232AEC0E1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"DDDE20AC-E2E3-420A-B957-C525C9327CBE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"B61B24C7-3133-4AAA-9C7F-9EC84303E79A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","matchCriteriaId":"A29657F1-2177-431E-9726-0253979580A1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5.3-94o","matchCriteriaId":"351739EC-0DA2-4A53-901A-F75F87C7E903"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10200:-:*:*:*:*:*:*:*","matchCriteriaId":"58F52D4A-407B-44D8-BFE7-E8861E45B71F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10400:-:*:*:*:*:*:*:*","matchCriteriaId":"F5A020A4-5395-4D59-B16C-D83FD8BC7BC0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10800:-:*:*:*:*:*:*:*","matchCriteriaId":"8338A3F2-1526-41CE-8A78-2717F77AB130"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0016","source":"PSIRT@sonicwall.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20019","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-06-23T22:15:08.323","lastModified":"2026-06-17T03:33:09.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability."},{"lang":"es","value":"Una vulnerabilidad en SonicOS donde la respuesta del servidor HTTP filtra parte de la memoria mediante el envío de una petición HTTP diseñada, esto puede conllevar potencialmente a una vulnerabilidad de divulgación de datos confidenciales internos"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS - 6.5.4.7-83n","status":"affected"},{"version":"SonicOSv - 6.5.4.4-44v-21-955","status":"affected"},{"version":"SonicOS - 6.5.1.12-3n","status":"affected"},{"version":"SonicOS - 6.0.5.3-94o","status":"affected"},{"version":"SonicOS - 7.0.0-R713 and earlier","status":"affected"},{"version":"SonicOS - 7.0.1-R1036 and earlier","status":"affected"},{"version":"SonicOS - 7.0.0.375 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.0.376","matchCriteriaId":"4D42B9BB-66D4-4389-8F91-91148E2A6B9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.1-r1036","matchCriteriaId":"15CCFEA2-9302-4BEB-A5E3-9F6CE47A7FF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.0.5.3-94o:*:*:*:*:*:*:*","matchCriteriaId":"1BC37D8B-1946-4998-AA64-A03D226CAA27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.1.12-3n:*:*:*:*:*:*:*","matchCriteriaId":"509A9DBE-EC4B-45B3-BB09-3E0C141180B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:6.5.4.7-83n:*:*:*:*:*:*:*","matchCriteriaId":"3CCE0644-D540-459E-AD53-698F12D08B94"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:6.5.4.4-44v-21-955:*:*:*:*:*:*:*","matchCriteriaId":"F2140596-2050-4CE1-8DB0-04F2A478955A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20024","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-07-09T22:15:08.320","lastModified":"2026-06-17T03:33:09.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations."},{"lang":"es","value":"Múltiples vulnerabilidades de lectura  fuera de límites en SonicWall Switch cuando se maneja el protocolo LLDP permite a un atacante causar una inestabilidad del sistema o leer potencialmente información confidencial de las ubicaciones de memoria"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Switch","versions":[{"version":"1.0.0.5-16 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:C","baseScore":6.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:switch:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0.5-16","matchCriteriaId":"076786F3-94BB-447A-B66C-07B89A2F1E58"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"AC1B14D9-15C7-4490-9A2C-4FD9462CF465"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*","matchCriteriaId":"F93E9E20-D465-490B-B2E0-A92670684ECE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*","matchCriteriaId":"A756CC39-180C-4293-8A45-7C55DC88639B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*","matchCriteriaId":"72DF3E57-4840-4327-9796-D92F663FFF4E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*","matchCriteriaId":"04079B4A-8CF2-4D17-B9AB-CF9A84692CAD"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"49B54692-77FD-411F-90F4-AAE31E48D5B8"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20028","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-08-04T19:15:08.247","lastModified":"2026-06-17T03:33:10.393","vulnStatus":"Analyzed","cveTags":[{"sourceIdentifier":"PSIRT@sonicwall.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier"},{"lang":"es","value":"** NO COMPATIBLE CUANDO SE ASIGNÓ ** Una neutralización inapropiada de un Comando SQL conllevando una vulnerabilidad de Inyección SQL impactando a los productos Secure Remote Access (SRA) al final de su vida útil, concretamente a dispositivos SRA que ejecutan todo el firmware 8.x y 9.0.0.9-26sv o anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SRA/SMA100","versions":[{"version":"8.x firmware","status":"affected"},{"version":"9.0.0.9-26sv and earlier.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T14:52:57.423481Z","id":"CVE-2021-20028","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-28","cisaActionDue":"2022-04-18","cisaRequiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","cisaVulnerabilityName":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"AA095C77-9E99-4086-A665-D15B62ED6318"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"D82266A9-0420-4C82-B7CE-6E35A197C774"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"9A5ACCFB-D882-4F7D-8CE4-3608B1053708"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_4600_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"4A1739FF-3445-4155-BCD5-FFC3ADC7BB11"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"2FC9EDA7-6306-4AC0-BBA2-BFC4D6EF7D05"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_1600_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"56142ABA-8DB5-40C4-B485-CA440BC26EB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"A19AAF5D-B03D-40BB-AF3C-8BAEFD60C0F7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_va_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0.0","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"403EDB9C-7FAE-496D-8307-B76FBC02FE50"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_va:-:*:*:*:*:*:*:*","matchCriteriaId":"43D2892B-20AF-4832-8C14-C2570804A4D0"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20028","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2021-20032","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-08-10T23:15:07.123","lastModified":"2026-06-17T03:33:10.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier."},{"lang":"es","value":"SonicWall Analytics versión 2.5 On-Prem es vulnerable a la vulnerabilidad de seguridad de la interfaz Java Debug Wire Protocol (JDWP) que potencialmente conlleva a una Ejecución de Código Remota. Esta vulnerabilidad afecta a Analytics On-Prem versiones 2.5.2518 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Analytics On-Prem","versions":[{"version":"Analytics On-Prem 2.5.2518 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-16"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:on-prem:*:*:*","versionEndIncluding":"2.5.2518","matchCriteriaId":"32E67D9C-4E90-48DD-8487-689F26D99546"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20037","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-09-21T09:15:07.503","lastModified":"2026-06-17T03:33:11.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier."},{"lang":"es","value":"Una vulnerabilidad en los permisos de archivo por defecto del instalador de SonicWall Global VPN Client versión 4.10.5 (32 y 64 bits), conlleva a una escalada de privilegios que permite potencialmente una ejecución de comandos en el sistema operativo anfitrión. Esta vulnerabilidad afecta al instalador de GVC versiones 4.10.5 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Global VPN Client","versions":[{"version":"Global VPN Client 4.10.5 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-276"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.5","matchCriteriaId":"56BEFDB8-3DB8-4D75-950C-A185408432F6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0024","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20034","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-09-27T18:15:08.327","lastModified":"2026-06-17T03:33:10.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en SMA100 permite a un atacante remoto no autenticado omitir las comprobaciones de salto de ruta y eliminar un archivo arbitrario, resultando potencialmente en un reinicio a la configuración predeterminada de fábrica"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.10-28sv and earlier","status":"affected"},{"version":"10.2.0.7-34sv and earlier","status":"affected"},{"version":"10.2.1.0-17sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.10-28sv","matchCriteriaId":"108AAFDC-548F-4450-9ABF-CAF42D759960"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndIncluding":"10.2.0.7-34sv","matchCriteriaId":"7433B0B1-15C8-4D79-A83F-FE4D26C96AA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndIncluding":"10.2.1.0-17sv","matchCriteriaId":"71954BC8-24EC-40E9-9376-4827104DA661"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.10-28sv","matchCriteriaId":"B4936140-6776-48A7-80FE-F526C8BA9D10"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndIncluding":"10.2.0.7-34sv","matchCriteriaId":"C12FB28F-CC80-41C6-BBC5-384655CB8016"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndIncluding":"10.2.1.0-17sv","matchCriteriaId":"DF34C6CE-C99C-4956-AE18-971AC93A4DEB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.10-28sv","matchCriteriaId":"198EF039-97C1-498D-8521-8357E6E65843"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndIncluding":"10.2.0.7-34sv","matchCriteriaId":"0F73402C-44D6-4B7A-B482-BAFB339DE78E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndIncluding":"10.2.1.0-17sv","matchCriteriaId":"817E88C2-EC36-4DDD-B022-4417D7875B00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.10-28sv","matchCriteriaId":"FE7AD359-EB77-478C-87D7-72C8C3DE8D45"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndIncluding":"10.2.0.7-34sv","matchCriteriaId":"324F8DFE-9AA8-4157-BC92-3F05AE1577D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndIncluding":"10.2.1.0-17sv","matchCriteriaId":"95AC69B7-BDDF-49C7-8AFA-ADDF06A1E2AA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.10-28sv","matchCriteriaId":"E65ABFDA-AC3F-4348-BF05-49CEE41C786C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndIncluding":"10.2.0.7-34sv","matchCriteriaId":"6915D214-F408-4E1D-B10A-4D268CB0643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndIncluding":"10.2.1.0-17sv","matchCriteriaId":"52384213-F14E-446D-BD7D-4869C3B8140B"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html","source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20035","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-09-27T18:15:08.383","lastModified":"2026-06-17T03:33:11.067","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales en la interfaz de administración de SMA100 permite a un atacante remoto autenticado inyectar comandos arbitrarios como usuario \"nobody\", que conlleva potencialmente a un DoS"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"9.0.0.10-28sv and earlier","status":"affected"},{"version":"10.2.0.7-34sv and earlier","status":"affected"},{"version":"10.2.1.0-17sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-17T03:55:36.888408Z","id":"CVE-2021-20035","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-04-16","cisaActionDue":"2025-05-07","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.11-31sv","matchCriteriaId":"1CAE16B5-709A-40E9-9C49-EA5DFA685299"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndExcluding":"10.2.0.8-37sv","matchCriteriaId":"2353D2AD-1943-4400-A7F9-884D38657CE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndExcluding":"10.2.1.1-19sv","matchCriteriaId":"A53E73ED-CE3D-4E81-BA96-5160CE726A96"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.11-31sv","matchCriteriaId":"47BFDA65-A16B-4983-9F7B-0B93DE953926"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndExcluding":"10.2.0.8-37sv","matchCriteriaId":"BB4A2769-6449-4C24-8A4F-EE38A8CC32EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndExcluding":"10.2.1.1-19sv","matchCriteriaId":"87C8D809-A71E-4C51-9F43-69C867E5E81F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.11-31sv","matchCriteriaId":"B0B3EC70-4A0C-4281-80AC-1E004E1D5346"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndExcluding":"10.2.0.8-37sv","matchCriteriaId":"B45BCC41-D7F1-4242-8501-0E1AC2BD81A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndExcluding":"10.2.1.1-19sv","matchCriteriaId":"8BC841EE-6C00-402C-ACF4-CE4536EDFBCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.11-31sv","matchCriteriaId":"999C0747-AFF2-4ABF-B8F0-A89202C1ACF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndExcluding":"10.2.0.8-37sv","matchCriteriaId":"A24369C9-53EE-4914-85DE-E95B8737CE8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndExcluding":"10.2.1.1-19sv","matchCriteriaId":"34DA5394-545B-48ED-9971-7761AEC0278F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.11-31sv","matchCriteriaId":"DE6FE067-0B1A-4065-9218-7C6DD0D8A76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndExcluding":"10.2.0.8-37sv","matchCriteriaId":"E86E27A1-5953-48C1-ACD0-3080AF643746"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.1.0","versionEndExcluding":"10.2.1.1-19sv","matchCriteriaId":"681CE4BD-C1F0-4737-88AE-3B555B85C33B"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20035","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2021-20031","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-10-12T23:15:07.727","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains."},{"lang":"es","value":"Una vulnerabilidad de Redirección de Encabezado de Host en SonicOS permite potencialmente a un atacante remoto redirigir a usuarios de la administración del firewall a dominios web arbitrarios"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"7.0.1-R1262 and earlier","status":"affected"},{"version":"7.0.1-R1283 and earlier","status":"affected"},{"version":"7.0.1-R579 and earlier","status":"affected"},{"version":"6.5.4.7 and earlier","status":"affected"},{"version":"6.5.1.12 and earlier","status":"affected"},{"version":"6.0.5.3-94o and earlier","status":"affected"},{"version":"6.5.4.4-44V-21-987 and earlier","status":"affected"},{"version":"5.9.1.13 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r1262","matchCriteriaId":"7177725D-324A-49F2-B8CA-F20245917932"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r1283","matchCriteriaId":"9A464BC2-6F17-4745-96D9-E6E11D757CC0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r579","matchCriteriaId":"C8598D61-86DA-489E-A201-3816DDE140B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.7","matchCriteriaId":"CD1E5890-88A6-4932-B077-9A2BA77D74FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"2D5A68BC-42AF-4F5A-8519-DCD232AEC0E1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"DDDE20AC-E2E3-420A-B957-C525C9327CBE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"B61B24C7-3133-4AAA-9C7F-9EC84303E79A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1.12","matchCriteriaId":"B0A5E010-6867-4F79-8F9E-674DED854580"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5.3-94o","matchCriteriaId":"351739EC-0DA2-4A53-901A-F75F87C7E903"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10200:-:*:*:*:*:*:*:*","matchCriteriaId":"58F52D4A-407B-44D8-BFE7-E8861E45B71F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10400:-:*:*:*:*:*:*:*","matchCriteriaId":"F5A020A4-5395-4D59-B16C-D83FD8BC7BC0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10800:-:*:*:*:*:*:*:*","matchCriteriaId":"8338A3F2-1526-41CE-8A78-2717F77AB130"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html","source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20038","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:07.750","lastModified":"2026-06-17T03:33:11.327","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región Stack de la memoria en las variables de entorno del módulo mod_cgi del servidor httpd de SMA100 permite a un atacante remoto no autenticado ejecutar potencialmente código como usuario \"nobody\" en el dispositivo. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v con firmware versiones 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv y versiones anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T14:26:58.722403Z","id":"CVE-2021-20038","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-01-28","cisaActionDue":"2022-02-11","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"01134E66-F1FD-477B-AD44-FDEE8368BE18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"B38AAB98-7668-4F34-8D5F-9933422F12DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"9F1FA3D8-C44A-4F33-B35D-AADF8C4E45DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"54946A90-09AC-4387-BACB-883AE70FD5A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"9395563D-9071-4CE2-BAEA-D6854F4AD961"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://github.com/jbaines-r7/badblood","source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.rapid7.com/blog/post/2022/01/11/cve-2021-20038-42-sonicwall-sma-100-multiple-vulnerabilities-fixed-2/","source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/jbaines-r7/badblood","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.rapid7.com/blog/post/2022/01/11/cve-2021-20038-42-sonicwall-sma-100-multiple-vulnerabilities-fixed-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20038","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2021-20039","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:07.903","lastModified":"2026-06-17T03:33:11.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Una neutralización inapropiada de elementos especiales en el método http POST de la interfaz de administración de SMA100 \"/cgi-bin/viewcert\" permite a un atacante remoto autenticado inyectar comandos arbitrarios como usuario \"nobody\". Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"9.0.0.11-31sv and earlier","status":"affected"},{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-15T14:46:52.429484Z","id":"CVE-2021-20039","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"4D9E19F4-7FF4-426C-8B08-BCC802F653E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"C14BCE5E-887B-41D4-9845-34E3A7CCDE58"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"9464A061-4218-472A-B981-8E6A653C5D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"C842AFF6-C556-4187-957B-548E5649D949"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"0E00827E-3007-4EA4-B22A-3BDFC246EA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/165563/SonicWall-SMA-100-Series-Authenticated-Command-Injection.html","source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/165563/SonicWall-SMA-100-Series-Authenticated-Command-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://attackerkb.com/topics/9szJhq46lw/cve-2021-20039/rapid7-analysis","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2021-20040","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:07.953","lastModified":"2026-06-17T03:33:11.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta relativo en la función upload de SMA100 permite a un atacante remoto no autenticado cargar páginas web o archivos diseñados como usuario \"nobody\". Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20041","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:08.003","lastModified":"2026-06-17T03:33:11.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Un adversario no autenticado y remoto puede consumir toda la CPU del dispositivo debido a peticiones HTTP diseñadas enviadas a SMA100 /fileshare/sonicfiles/sonicfiles, lo que provoca un bucle con condición de salida inalcanzable. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"9.0.0.11-31sv and earlier","status":"affected"},{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-835"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"4D9E19F4-7FF4-426C-8B08-BCC802F653E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"C14BCE5E-887B-41D4-9845-34E3A7CCDE58"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"9464A061-4218-472A-B981-8E6A653C5D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"C842AFF6-C556-4187-957B-548E5649D949"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"0E00827E-3007-4EA4-B22A-3BDFC246EA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20042","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:08.053","lastModified":"2026-06-17T03:33:11.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Un atacante remoto no autenticado puede usar el SMA 100 como un proxy no intencionado o un proxy no detectable para omitir las reglas del firewall. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"9.0.0.11-31sv and earlier","status":"affected"},{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-441"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"4D9E19F4-7FF4-426C-8B08-BCC802F653E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"C14BCE5E-887B-41D4-9845-34E3A7CCDE58"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"9464A061-4218-472A-B981-8E6A653C5D53"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"C842AFF6-C556-4187-957B-548E5649D949"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*","matchCriteriaId":"0E00827E-3007-4EA4-B22A-3BDFC246EA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20043","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:08.100","lastModified":"2026-06-17T03:33:12.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento del búfer en la región Heap de la memoria en el método getBookmarks de SonicWall SMA100 permite a un atacante remoto autenticado ejecutar potencialmente código como el usuario nobody en el dispositivo. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20044","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:08.150","lastModified":"2026-06-17T03:33:12.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos remotos después de la autenticación en SonicWall SMA100 permite a un atacante remoto autenticado ejecutar comandos del Sistema Operativo en el dispositivo. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20045","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:08.200","lastModified":"2026-06-17T03:33:12.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en el método RAC_COPY_TO (RacNumber 36) de SMA100 permite a un atacante remoto no autenticado ejecutar potencialmente código como el usuario \"nobody\" en el dispositivo. Esta vulnerabilidad afecta a los aparatos SMA 200, 210, 400, 410 y 500v"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.1-19sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"33233A45-6667-4CE9-A21C-6A6C725689F8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"E4F1C135-A182-4233-B7FC-D08C754ECE13"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"8EC74D70-C04B-481F-A706-6C86751996FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F42-A5DF-42CC-86F9-B06B39BBC202"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*","matchCriteriaId":"AC429F62-366B-4B68-B378-FB741F9F7FEF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20047","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-08T10:15:08.247","lastModified":"2026-06-17T03:33:12.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system."},{"lang":"es","value":"El cliente SonicWall Global VPN versión 4.10.6 (32 bits y 64 bits) y anteriores, presentan una vulnerabilidad de Secuestro de Órdenes de Búsqueda de DLL. Una explotación con éxito por medio de un atacante local podría resultar en una ejecución de código remota en el sistema objetivo"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Global VPN Client","versions":[{"version":"Global VPN Client 4.10.6 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:x64:*","versionEndIncluding":"4.10.6","matchCriteriaId":"6753B3C2-C77F-4CB0-BC09-DA2F6BD4AB0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:x86:*","versionEndIncluding":"4.10.6","matchCriteriaId":"02A8917C-3DE5-48F5-B716-517B89195C1D"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0025","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20049","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-23T02:15:06.583","lastModified":"2026-06-17T03:33:12.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions."},{"lang":"es","value":"Una vulnerabilidad en la API de cambio de contraseña de SonicWall SMA100, permite a un atacante remoto no autenticado llevar a cabo una enumeración de nombres de usuario de SMA100 basándose en las respuestas del servidor. Esta vulnerabilidad afecta a las versiones 10.2.1.2-24sv, 10.2.0.8-37sv y versiones anteriores 10.x"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-204"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"C1A02AA5-1A61-429B-B0B3-898636C4B563"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"87A26093-E966-4EBA-AA58-2C98499B9165"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"5575D431-4FF7-4717-9DA8-4DBD1EF49BB1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"903AAB55-2325-44BA-ADA9-69AAEE9A1AF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"01134E66-F1FD-477B-AD44-FDEE8368BE18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma200:-:*:*:*:*:*:*:*","matchCriteriaId":"F4AE2DFC-D7C3-40B8-B3DD-B65F7BB5D8C3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"F4892669-DD8A-4A28-B6AA-632A8DA861AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"B38AAB98-7668-4F34-8D5F-9933422F12DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma210:-:*:*:*:*:*:*:*","matchCriteriaId":"E069FF32-C6B6-4EB3-B6E4-CEF6A6C4257D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"F9AC3454-D403-4989-81F3-9DD7608967AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"54946A90-09AC-4387-BACB-883AE70FD5A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma400:-:*:*:*:*:*:*:*","matchCriteriaId":"8A0EF9C5-685E-49A4-ABFE-302781111753"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"42AE0158-515A-4565-B814-27AEAD941304"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"9F1FA3D8-C44A-4F33-B35D-AADF8C4E45DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma410:-:*:*:*:*:*:*:*","matchCriteriaId":"47C0EBD9-B4BA-4E45-8BE3-3B6C60BF0FC1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"4AE054F5-87E5-4DF5-9CD8-BF39428A092F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"9395563D-9071-4CE2-BAEA-D6854F4AD961"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma500v:-:*:*:*:*:*:*:*","matchCriteriaId":"8FF52AAE-592C-4472-866C-7776ADBA5E93"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0030","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20050","sourceIdentifier":"PSIRT@sonicwall.com","published":"2021-12-23T02:15:06.637","lastModified":"2026-06-17T03:33:12.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en la serie SMA100 conlleva a que varias API de administración restringidas sean accesibles sin un inicio de sesión de usuario, exponiendo potencialmente los metadatos de configuración"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA100","versions":[{"version":"10.2.0.8-37sv and earlier","status":"affected"},{"version":"10.2.1.2-24sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"C1A02AA5-1A61-429B-B0B3-898636C4B563"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"87A26093-E966-4EBA-AA58-2C98499B9165"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"5575D431-4FF7-4717-9DA8-4DBD1EF49BB1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"903AAB55-2325-44BA-ADA9-69AAEE9A1AF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"4185C028-6A07-4A92-8380-9AA3953D2CFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"01134E66-F1FD-477B-AD44-FDEE8368BE18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma200:-:*:*:*:*:*:*:*","matchCriteriaId":"F4AE2DFC-D7C3-40B8-B3DD-B65F7BB5D8C3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"F4892669-DD8A-4A28-B6AA-632A8DA861AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"E62EEC93-6F52-4DDB-95F0-D5736391D64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"B38AAB98-7668-4F34-8D5F-9933422F12DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma210:-:*:*:*:*:*:*:*","matchCriteriaId":"E069FF32-C6B6-4EB3-B6E4-CEF6A6C4257D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"F9AC3454-D403-4989-81F3-9DD7608967AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"9BE21589-3BEC-4245-9939-CF50DE70B12A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"54946A90-09AC-4387-BACB-883AE70FD5A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma400:-:*:*:*:*:*:*:*","matchCriteriaId":"8A0EF9C5-685E-49A4-ABFE-302781111753"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"42AE0158-515A-4565-B814-27AEAD941304"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"53698BD3-43B6-4EC4-8847-E6ED9A3CB6F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"9F1FA3D8-C44A-4F33-B35D-AADF8C4E45DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma410:-:*:*:*:*:*:*:*","matchCriteriaId":"47C0EBD9-B4BA-4E45-8BE3-3B6C60BF0FC1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.0.0","matchCriteriaId":"4AE054F5-87E5-4DF5-9CD8-BF39428A092F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*","matchCriteriaId":"379F7CA2-8914-4710-AE6B-D2833605D4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.2-24sv:*:*:*:*:*:*:*","matchCriteriaId":"9395563D-9071-4CE2-BAEA-D6854F4AD961"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma500v:-:*:*:*:*:*:*:*","matchCriteriaId":"8FF52AAE-592C-4472-866C-7776ADBA5E93"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0031","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20046","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-01-10T14:10:16.537","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions."},{"lang":"es","value":"Un desbordamiento del búfer en la región Stack de la memoria en el encabezado de respuesta HTTP Content-Length de SonicOS permite a un atacante remoto autenticado causar una Denegación de Servicio (DoS) y potencialmente resultar en una ejecución de código en el firewall. Esta vulnerabilidad afecta a SonicOS versiones de firmware Gen 5, Gen 6 y Gen 7"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"7.0.1-R146 and earlier","status":"affected"},{"version":"7.0.1-5023-1349 and earlier","status":"affected"},{"version":"7.0.1-5018-R1715 and earlier","status":"affected"},{"version":"6.5.4.8-89n and earlier","status":"affected"},{"version":"6.5.1.13-1n and earlier","status":"affected"},{"version":"6.0.5.3-94o and earlier","status":"affected"},{"version":"6.5.4.v_21s-1288 and earlier","status":"affected"},{"version":"5.9.1.13 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r146","matchCriteriaId":"B579C72A-7E3C-4289-B908-54777E4665EF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5023-1349","matchCriteriaId":"EF016251-1EC4-4513-981C-CF846CBB11A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5018-r1715","matchCriteriaId":"DB2AC71A-1446-4448-88C0-30295BE95577"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.8-89n","matchCriteriaId":"E45CB5A3-4D23-46F1-8712-22F70E43E40A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"2D5A68BC-42AF-4F5A-8519-DCD232AEC0E1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"DDDE20AC-E2E3-420A-B957-C525C9327CBE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"B61B24C7-3133-4AAA-9C7F-9EC84303E79A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1.13-1n","matchCriteriaId":"A3E0782E-7AA4-4569-920F-E8C94892C2E1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5.3-94o","matchCriteriaId":"351739EC-0DA2-4A53-901A-F75F87C7E903"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10200:-:*:*:*:*:*:*:*","matchCriteriaId":"58F52D4A-407B-44D8-BFE7-E8861E45B71F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10400:-:*:*:*:*:*:*:*","matchCriteriaId":"F5A020A4-5395-4D59-B16C-D83FD8BC7BC0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10800:-:*:*:*:*:*:*:*","matchCriteriaId":"8338A3F2-1526-41CE-8A78-2717F77AB130"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0.0","versionEndIncluding":"5.9.1.13","matchCriteriaId":"83D659F7-8259-4AA8-B8F3-45923DFB29DE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0027","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20048","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-01-10T14:10:16.610","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Service (DoS) and potentially results in code execution in the firewall. This vulnerability affected SonicOS Gen 5, Gen 6 and Gen 7 firmware versions."},{"lang":"es","value":"Un desbordamiento del búfer en la región Stack de la memoria en el encabezado de respuesta HTTP SessionID de SonicOS permite a un atacante remoto autenticado causar una Denegación de Servicio (DoS) y potencialmente resultar en una ejecución de código en el firewall. Esta vulnerabilidad afecta a SonicOS versiones de firmware Gen 5, Gen 6 y Gen 7"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"7.0.1-R146 and earlier","status":"affected"},{"version":"7.0.1-5023-1349 and earlier","status":"affected"},{"version":"7.0.1-5018-R1715 and earlier","status":"affected"},{"version":"6.5.4.8-89n and earlier","status":"affected"},{"version":"6.5.1.13-1n and earlier","status":"affected"},{"version":"6.0.5.3-94o and earlier","status":"affected"},{"version":"6.5.4.v_21s-1288 and earlier","status":"affected"},{"version":"5.9.1.13 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r1456","matchCriteriaId":"50478447-8102-4BC4-9E96-3165B20B8BE8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5023-1349","matchCriteriaId":"EF016251-1EC4-4513-981C-CF846CBB11A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5018-r1715","matchCriteriaId":"DB2AC71A-1446-4448-88C0-30295BE95577"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.8","matchCriteriaId":"69B768DB-D5BE-44A5-9155-6667ED9F410C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"2D5A68BC-42AF-4F5A-8519-DCD232AEC0E1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"DDDE20AC-E2E3-420A-B957-C525C9327CBE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"B61B24C7-3133-4AAA-9C7F-9EC84303E79A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.1.13-1n","matchCriteriaId":"A3E0782E-7AA4-4569-920F-E8C94892C2E1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_9800:-:*:*:*:*:*:*:*","matchCriteriaId":"08CEF935-BC0B-4A7D-BB3C-72B68965383F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5.3-94o","matchCriteriaId":"351739EC-0DA2-4A53-901A-F75F87C7E903"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10200:-:*:*:*:*:*:*:*","matchCriteriaId":"58F52D4A-407B-44D8-BFE7-E8861E45B71F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10400:-:*:*:*:*:*:*:*","matchCriteriaId":"F5A020A4-5395-4D59-B16C-D83FD8BC7BC0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:supermassive_e10800:-:*:*:*:*:*:*:*","matchCriteriaId":"8338A3F2-1526-41CE-8A78-2717F77AB130"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.1.13","matchCriteriaId":"FF2C3009-7B05-41B3-849E-DFBB8C79968D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0028","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22273","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-03-17T02:15:06.567","lastModified":"2026-06-17T04:28:09.047","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"PSIRT@sonicwall.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances running all 8.x, 9.0.0.5-19sv and earlier versions and Secure Mobile Access (SMA) 100 series products running older firmware 9.0.0.9-26sv and earlier versions"},{"lang":"es","value":"** NO SOPORTADO CUANDO DE ASIGNÓ ** Una Neutralización Inapropiada de Elementos Especiales conllevando a una vulnerabilidad de Inyección de Comandos en el Sistema Operativo impactando a los productos Secure Remote Access (SRA) al final de su vida útil y a las versiones de firmware más antiguas de los productos de la serie 100 de Secure Mobile Access (SMA), concretamente a los dispositivos SRA ejecutando todas las versiones 8.x, 9.0.0.5-19sv y anteriores y los productos de la serie 100 de Secure Mobile Access (SMA) ejecutando el firmware más antiguo 9.0.0.9-26sv y versiones anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SRA/SMA100","versions":[{"version":"SRA Series 9.0.0.5-19sv and earlier versions.","status":"affected"},{"version":"SMA100 Series 9.0.0.9-26sv and earlier versions.","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sma_100","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:sma_100:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"9.0.0.9-26sv","versionType":"custom","status":"affected"}]},{"vendor":"sonicwall","product":"sra","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:sra:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"9.0.0.5-19sv","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T18:20:37.677148Z","id":"CVE-2022-22273","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.9-26sv","matchCriteriaId":"99C0481F-4CB1-43BF-ADA9-229299317343"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.9-26sv","matchCriteriaId":"2D0EAE44-82C5-42B6-BF85-3A77B9D05177"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.9-26sv","matchCriteriaId":"5BAB3FDF-EDB2-47E1-B0C5-1B17F33C9803"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.9-26sv","matchCriteriaId":"63823C19-6F4A-4061-9A7F-7DADBA1C801F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.9-26sv","matchCriteriaId":"9E9942D7-D482-4AA7-B12B-52AD281B08E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_4200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.5-19sv","matchCriteriaId":"9A85046F-061A-4EB8-AFA5-80B19E0216E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_4200:-:*:*:*:*:*:*:*","matchCriteriaId":"7E0D22FF-44D8-4D95-AC53-4C427CAD7CF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_4600_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.5-19sv","matchCriteriaId":"A92EB386-1F93-41BB-B670-23A51147226A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"2FC9EDA7-6306-4AC0-BBA2-BFC4D6EF7D05"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_1600_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.5-19sv","matchCriteriaId":"C2DC3EE5-D9BC-4AAF-9BFE-CC72F0C26AD6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"A19AAF5D-B03D-40BB-AF3C-8BAEFD60C0F7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_1200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.5-19sv","matchCriteriaId":"9B1F8903-DB6B-4795-A97E-F7B4916DCBC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_1200:-:*:*:*:*:*:*:*","matchCriteriaId":"57A11F88-DDC9-4C59-A985-DA831BEF78D4"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0001","source":"PSIRT@sonicwall.com","tags":["Patch","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22274","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-03-25T23:15:08.353","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región Stack de la memoria en SonicOS por medio de una petición HTTP permite a un atacante remoto no autenticado causar una denegación de servicio (DoS) o potencialmente resultando en una ejecución de código en el firewall"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 7.0.1-5050 and earlier","status":"affected"},{"version":"SonicOS 7.0.1-R579 and earlier","status":"affected"},{"version":"SonicOSv 6.5.4.4-44v-21-1452 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5050","matchCriteriaId":"5348AB48-8B9B-4928-8B0C-D819D03D0FEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r579","matchCriteriaId":"C8598D61-86DA-489E-A201-3816DDE140B9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicosv:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4-44v-21-1452","matchCriteriaId":"6E83E089-AFB5-4959-895A-A7CA85570770"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22279","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-04-13T06:15:07.177","lastModified":"2026-06-17T04:28:09.847","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"PSIRT@sonicwall.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) 100 series products, specifically the SRA appliances running all 8.x, 9.0.0.5-19sv and earlier versions and Secure Mobile Access (SMA) 100 series products running older firmware 9.0.0.9-26sv and earlier versions"},{"lang":"es","value":"** NO SOPORTADO CUANDO SE ASIGNÓ ** Una vulnerabilidad de lectura arbitraria de archivos después de la autenticación que afecta a los productos Secure Remote Access (SRA) al final de su vida útil y a las versiones de firmware más antiguas de los productos de la serie 100 de Secure Mobile Access (SMA), concretamente a los dispositivos SRA que ejecutan todas las versiones 8.x, 9.0.0.5-19sv y anteriores y a los productos de la serie 100 de Secure Mobile Access (SMA) que ejecutan el firmware más antiguo 9.0.0.9-26sv y versiones anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SRA/SMA100","versions":[{"version":"SRA Series 9.0.0.5-19sv and earlier versions.","status":"affected"},{"version":"SMA100 Series 9.0.0.9-26sv and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_1200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.5-19sv","matchCriteriaId":"9B1F8903-DB6B-4795-A97E-F7B4916DCBC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_1200:-:*:*:*:*:*:*:*","matchCriteriaId":"57A11F88-DDC9-4C59-A985-DA831BEF78D4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_4200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.0.5-19sv","matchCriteriaId":"9A85046F-061A-4EB8-AFA5-80B19E0216E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_4200:-:*:*:*:*:*:*:*","matchCriteriaId":"7E0D22FF-44D8-4D95-AC53-4C427CAD7CF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"65C5F0B0-52B8-4B4D-BAC4-621AC436E277"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"6EAE0CEC-B7B9-463B-8B3C-768087516C3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.0.10-28sv","matchCriteriaId":"C7FD613A-FB00-43FE-9A00-97172FF85EA6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0006","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22275","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-04-27T17:15:07.273","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake potentially resulting in Denial of Service (DoS) attack if a target host is vulnerable."},{"lang":"es","value":"Una Restricción Inapropiada del Canal de Comunicación TCP en el tráfico de entrada HTTP/S de la WAN a la DMZ omitiendo la política de seguridad hasta el apretón de manos TCP, resultando potencialmente en un ataque de Denegación de Servicio (DoS) si el host de destino es vulnerable"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS Gen 7 TZ-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSa-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSv-Series 7.0.1.0-5030-1391 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSsp-Series 7.0.1-5030-R780 and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndIncluding":"7.0.1-5030-r2007","matchCriteriaId":"F8464F67-85C1-4E80-AE4B-C121BD8F93AC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndIncluding":"7.0.1.0-5030-1391","matchCriteriaId":"01B222A9-64C3-4C64-8707-0F53B2BA636B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndIncluding":"7.0.1-5030-r780","matchCriteriaId":"BA61E6BD-4873-4A78-9A64-D645923D68A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22276","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-04-27T17:15:07.337","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user."},{"lang":"es","value":"Una vulnerabilidad en el servicio SNMP de SonicOS resultando en una exposición de información confidencial a un usuario no autorizado"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS Gen 7 TZ-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSa-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSv-Series 7.0.1.0-5030-1391 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSsp-Series 7.0.1-5030-R780 and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C4AFD3B4-E623-4E5E-B6E3-C868A904D099"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"6146E0C8-C5BB-499D-A96D-F389005907A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"11C184C3-B45C-463E-9EEE-93C809C3E30C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"20B993F6-86CC-4B12-A0FD-BED6D327AAF7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_10700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"52C0B074-3D97-49BB-A3FD-D316FBFE0F95"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_11700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"59528209-07F4-461E-B120-5559D4E9DA90"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_12400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"DB28494B-45BC-4DA4-913C-6569A898AE01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_12800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"5B77B8C4-AD73-4C26-91AE-BA66DEA21D11"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_13700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"0FC1D781-9F63-4559-AB61-F22F09DCB915"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_15700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"ABA21425-8435-4BFB-A75C-E53B50AB54B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"BE1FC1E2-9445-4563-9003-8110C5E811C3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"39DBBC2B-24CC-4CF6-A700-090BDC890E94"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"03A6FF32-EDAF-4D5E-A365-F1C693498FD8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"8FE24F88-E6D3-410F-814E-9C3E7F7B2AAD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"8FEAFEE2-A23A-47EF-B6C1-E0B554F173CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_1600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"4D85DE14-68AA-43EC-BECF-6E8CBC40AFAC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"76F5C662-A97A-4B1C-AEE9-08724F55B818"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_25_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"34A382C1-EA35-44EC-B2EA-4740AA0F7BE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_270_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"4DE753AE-26B3-4549-992A-AC80D578474C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"0DD008C6-6F0F-40FF-879B-8362DA326686"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"60BA1C39-04C3-4652-B060-FFD96B3B1C93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_470_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"AC2D35CB-BFDF-4661-880D-E3EC2576B6F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_50_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"71DE0BAA-A331-4EA1-A66F-D641D6BF41E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"5C01396B-2F62-42F1-9FE8-A6E762C39269"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_870_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"F4633CAF-FD12-4AEF-A994-EED301A41AD0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"12BD7973-192B-42F7-B880-4E85714A4BDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"AC300FB0-6B64-4EBC-ACA3-50D3BE60C4A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"28EB0A22-8096-4784-A1FB-670410EAD0B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"0B04CF80-5FA2-41B8-BD7C-39D498FEEDBF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"507519D2-3CFF-48FD-AD9F-2B42DADE660A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"4944BF99-147C-4945-BA19-18C95309904B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"D064D1A1-DA21-45A1-BA38-519E7EBE5898"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"882B72E4-5141-4280-819E-C4A80E6A464C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"1E9757B0-B0AB-433F-8C85-A8F0CEE44D1F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C893FD13-98CF-4C06-9D5E-5B08F3C88D5F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"8BE0BBF9-D363-4106-A805-F86637AFBBD8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"53DCED63-ADC3-4E82-BABA-D24F76C3DD17"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"7E16CA5E-1261-400F-A195-7FC44BBEDA68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"4273AA33-9129-49FA-9396-3BF0CF297422"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9250_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"CA4AE1A6-0F7E-4F86-B3A1-484C1DD97092"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9450_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C8F74599-442F-4DE1-8BCF-FE38B159AEFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"06C19936-43F3-4348-9B08-F0897134D791"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"ABEA6F9B-3E58-42BA-848E-5BD84DC71E15"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"6797D1EF-92E1-43E9-92EC-3779B7AAE9F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"B3A454D4-6681-4492-948C-F85AFBB23F06"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C4772E1B-F3B7-481F-8B96-980AA0936C74"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"0AC5E922-DAF7-4F21-96E2-9489387835B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"AB3A0E77-C70F-4CA8-B35F-4F72A2D128CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz670_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"B4D07D4B-7D7F-4F92-8746-737356F7446C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22277","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-04-27T17:15:07.397","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext."},{"lang":"es","value":"Una vulnerabilidad en el servicio SNMP de SonicOS resultando en una exposición de información confidencial del punto de acceso inalámbrico en texto sin cifrar"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS Gen 7 TZ-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSa-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSv-Series 7.0.1.0-5030-1391 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSsp-Series 7.0.1-5030-R780 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 6 6.5.4.9-93n and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"CBC23B54-639C-4FFF-B580-6E787ECAC3BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300p_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"122ABFDB-2BE3-475F-920A-7FAAA3850EB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"2AFBFE42-2E8D-4549-B095-B47E0DC00CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AF0FFA3F-E5A0-4B84-86A9-F4A82438461B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"52309DBB-F7A4-4B32-936E-8EBEEFBA2592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BDA1B77-C458-4782-8D05-EE0942AE423F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"955D5EEA-51F0-456B-94E1-5FE29B110699"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9D637E6A-83EA-4CEC-810D-164A2E95565E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_10700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"52C0B074-3D97-49BB-A3FD-D316FBFE0F95"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_11700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"59528209-07F4-461E-B120-5559D4E9DA90"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_12400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"DB28494B-45BC-4DA4-913C-6569A898AE01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_12800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"5B77B8C4-AD73-4C26-91AE-BA66DEA21D11"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_13700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"0FC1D781-9F63-4559-AB61-F22F09DCB915"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_15700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"ABA21425-8435-4BFB-A75C-E53B50AB54B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"925AED91-15F8-4ED0-8FF1-A6A7AB5EC3E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8134DD19-2F0D-4925-9707-BD69792EEB51"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"5F2D2D9D-459C-4009-AB88-68196493092A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"52AB25CE-F6BB-45C0-8C9F-DBE18C0DB710"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"36C01F71-D6ED-4C9F-AE0A-40712F29512B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ED3DF817-A706-4DC9-BCB9-637AA6CB71F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"8FE24F88-E6D3-410F-814E-9C3E7F7B2AAD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"8FEAFEE2-A23A-47EF-B6C1-E0B554F173CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_1600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"4D85DE14-68AA-43EC-BECF-6E8CBC40AFAC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"76F5C662-A97A-4B1C-AEE9-08724F55B818"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_25_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"34A382C1-EA35-44EC-B2EA-4740AA0F7BE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_270_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"4DE753AE-26B3-4549-992A-AC80D578474C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"0DD008C6-6F0F-40FF-879B-8362DA326686"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"60BA1C39-04C3-4652-B060-FFD96B3B1C93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_470_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"AC2D35CB-BFDF-4661-880D-E3EC2576B6F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_50_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"71DE0BAA-A331-4EA1-A66F-D641D6BF41E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"5C01396B-2F62-42F1-9FE8-A6E762C39269"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_870_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"F4633CAF-FD12-4AEF-A994-EED301A41AD0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"009872A9-8585-4B07-A399-A6626D8A1FEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"71ECC6BC-395B-4D1E-83BA-550CFDDD833E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"AA11D013-9E25-4D7C-A662-CE78923B025E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1D55EB54-E43D-4EF5-952C-924F48CE1CFD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"CFEC0A24-3D87-42CF-B5EC-DBC9D0B3409C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C00AC04A-D185-4759-9766-A13F28EB3D35"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"AABB0E80-9BDD-4E40-9719-A6BA2FECBE16"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C30DF832-0EEA-4DEF-A81A-5ECB418AF3A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"4E1A5847-DD41-4A31-9E8F-DCDCF8570ACD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2650_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"757C46AF-CB8F-479B-B9C0-B47AD9F375F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"5E6923CA-01F3-4F9F-821F-E9D720684458"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2700_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"74C381B8-5E14-469B-BE47-6D8B79C3DDE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"4B9D2A23-86F1-44F0-80DE-0984B7D3FA7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3650_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5DA3A5B6-FA71-4EC1-AC05-42D17A3B88BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"3315228E-6350-4CCB-9794-92DD4BF20917"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3700_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"714723A9-BBCF-4192-9233-83EFB87F95D9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"699E201F-1F8E-4D94-ADEF-9D828489AE86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4650_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6DC28E32-5638-4727-A06C-E49090CF20F3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"3E3059A0-8EB4-46B3-B0E4-29DA9C4C3353"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4700_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AA73FF90-2F80-463D-8F31-CA5BEF93FCC2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"B9F18AA1-A316-4BA0-9610-FB5FF0FDD4ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5650_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"461E7DB6-21ED-4774-8AF7-819C42904CF2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"F8494BD6-7824-431F-BF54-207E29FDD9EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5700_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"723A7EFA-0E9D-454A-A584-0FAD24F0A9C4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"6C0321EB-3092-4D7F-953E-37A421CF80FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6650_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EBEF6F6C-6E2D-405A-B0A2-4073C6B884EC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"C33E77A7-02CA-42CE-8F96-11547D064C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6700_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8045EACC-25C9-4D8E-BE55-E9032CB4E38C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9250_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"CD748C1F-0191-4B98-81D1-0A36411F4910"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9250_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D42C886-A250-47E7-AB9E-930F647DFB1F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9450_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"0B7E66A1-5522-408C-BFDB-D7CCFC1FF73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9450_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B4AADBFB-6F6F-41FB-B638-D9F381956F1F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"531FDECB-33DC-40D2-A053-DE7A6072221B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9650_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FD15E0D8-718C-4C50-884A-80E733C72959"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"E1039FA8-2794-4AD5-BBEB-0B757B07CEA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFBA4CE-98F9-4C4E-8231-B2599D9F1422"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"BD989400-6116-43DC-8CA4-2F293531F36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD779CD6-69BD-48DD-A05E-E939643E5F12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"876274D7-48FB-459F-83C5-02675A451E7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570p_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E7DF5C88-66F9-4D52-AD29-26109A1ECEAF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"74CD0CA7-CF28-44A4-9396-ACFB113E9030"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570w_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EA2C820D-E0A3-4D46-B142-1FDE228D8EFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"53DE309B-88EF-46FD-A8FF-22AEC0210ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"44CA26BE-FBB5-4946-A6FC-D5A3E0D9FDD7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"85E8CC11-5869-4F72-AA3F-F0A85BF76A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600p_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B420B234-A97A-46CF-9163-E45EBF677737"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz670_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.10","matchCriteriaId":"B96FB085-E44C-4D7C-A4E2-E01F25CB3DA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz670_firmware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EA8F7C68-EECF-4A41-98FC-DAB1E4F4CFF4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22278","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-04-27T17:15:07.453","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when users try to access prohibited resource this allows an attacker to cause HTTP Denial of Service (DoS) attack"},{"lang":"es","value":"Una vulnerabilidad en SonicOS CFS (servicio de filtrado de contenidos) devuelve un gran mensaje de respuesta HTTP 403 prohibido a la dirección de origen cuando usuarios intentan acceder a un recurso prohibido, lo que permite a un atacante causar un ataque de Denegación de Servicio HTTP (DoS)"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS Gen 7 TZ-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSa-Series 7.0.1-5030-R2007 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSv-Series 7.0.1.0-5030-1391 and earlier versions.","status":"affected"},{"version":"SonicOS Gen 7 NSsp-Series 7.0.1-5030-R780 and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C4AFD3B4-E623-4E5E-B6E3-C868A904D099"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz300w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"6146E0C8-C5BB-499D-A96D-F389005907A9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"11C184C3-B45C-463E-9EEE-93C809C3E30C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz350w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"20B993F6-86CC-4B12-A0FD-BED6D327AAF7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_10700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"52C0B074-3D97-49BB-A3FD-D316FBFE0F95"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_11700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"59528209-07F4-461E-B120-5559D4E9DA90"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_12400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"DB28494B-45BC-4DA4-913C-6569A898AE01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_12800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"5B77B8C4-AD73-4C26-91AE-BA66DEA21D11"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_13700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"0FC1D781-9F63-4559-AB61-F22F09DCB915"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nssp_15700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"ABA21425-8435-4BFB-A75C-E53B50AB54B7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"BE1FC1E2-9445-4563-9003-8110C5E811C3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz370w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"39DBBC2B-24CC-4CF6-A700-090BDC890E94"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"03A6FF32-EDAF-4D5E-A365-F1C693498FD8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_10_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"8FE24F88-E6D3-410F-814E-9C3E7F7B2AAD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"8FEAFEE2-A23A-47EF-B6C1-E0B554F173CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_1600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"4D85DE14-68AA-43EC-BECF-6E8CBC40AFAC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"76F5C662-A97A-4B1C-AEE9-08724F55B818"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_25_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"34A382C1-EA35-44EC-B2EA-4740AA0F7BE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_270_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"4DE753AE-26B3-4549-992A-AC80D578474C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"0DD008C6-6F0F-40FF-879B-8362DA326686"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"60BA1C39-04C3-4652-B060-FFD96B3B1C93"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_470_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"AC2D35CB-BFDF-4661-880D-E3EC2576B6F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_50_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"71DE0BAA-A331-4EA1-A66F-D641D6BF41E9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"5C01396B-2F62-42F1-9FE8-A6E762C39269"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsv_870_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1.0","matchCriteriaId":"F4633CAF-FD12-4AEF-A994-EED301A41AD0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz400w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"12BD7973-192B-42F7-B880-4E85714A4BDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"AC300FB0-6B64-4EBC-ACA3-50D3BE60C4A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz470w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"28EB0A22-8096-4784-A1FB-670410EAD0B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"0B04CF80-5FA2-41B8-BD7C-39D498FEEDBF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"507519D2-3CFF-48FD-AD9F-2B42DADE660A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_2700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"4944BF99-147C-4945-BA19-18C95309904B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"D064D1A1-DA21-45A1-BA38-519E7EBE5898"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_3700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"882B72E4-5141-4280-819E-C4A80E6A464C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"1E9757B0-B0AB-433F-8C85-A8F0CEE44D1F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_4700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C893FD13-98CF-4C06-9D5E-5B08F3C88D5F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"8BE0BBF9-D363-4106-A805-F86637AFBBD8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_5700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"53DCED63-ADC3-4E82-BABA-D24F76C3DD17"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"7E16CA5E-1261-400F-A195-7FC44BBEDA68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_6700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"4273AA33-9129-49FA-9396-3BF0CF297422"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9250_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"CA4AE1A6-0F7E-4F86-B3A1-484C1DD97092"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9450_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C8F74599-442F-4DE1-8BCF-FE38B159AEFA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:nsa_9650_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"06C19936-43F3-4348-9B08-F0897134D791"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz500w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"ABEA6F9B-3E58-42BA-848E-5BD84DC71E15"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"6797D1EF-92E1-43E9-92EC-3779B7AAE9F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"B3A454D4-6681-4492-948C-F85AFBB23F06"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz570w_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"C4772E1B-F3B7-481F-8B96-980AA0936C74"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"0AC5E922-DAF7-4F21-96E2-9489387835B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz600p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"AB3A0E77-C70F-4CA8-B35F-4F72A2D128CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:tz670_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1","matchCriteriaId":"B4D07D4B-7D7F-4F92-8746-737356F7446C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20051","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-05-04T16:15:07.997","lastModified":"2026-06-17T03:33:12.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system."},{"lang":"es","value":"El instalador de SonicWall Global VPN Client versión 4.10.7.1117 (32 y 64 bits) y versiones anteriores, presentan una vulnerabilidad de secuestro de orden de búsqueda de DLL en uno de los componentes del instalador. Una explotación con éxito por medio de un atacante local podría resultar en una ejecución de comandos en el sistema de destino"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Global VPN Client","versions":[{"version":"Global VPN Client 4.10.7.1117 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_vpn_client:*:*:*:*:*:*:*:*","versionEndIncluding":"4.10.7.1117","matchCriteriaId":"1A711819-3994-4CA8-A5B5-EAA4A48E95B5"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0036","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-1701","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-05-13T20:15:07.870","lastModified":"2026-06-17T04:22:56.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data."},{"lang":"es","value":"El firmware de la serie SonicWall SMA1000 versiones 12.4.0, 12.4.1-02965 y versiones anteriores, usa una clave de cifrado compartida y embebida para almacenar datos"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA1000","versions":[{"version":"12.4.0","status":"affected"},{"version":"12.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"17505971-4213-4CD8-BFCA-C2709ED1D7A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3AD1484C-6DC2-40E8-A423-391F75809A07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*","matchCriteriaId":"17BDC1B0-BE6A-4680-A78E-5338AD709095"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CAF7029-6661-4935-BFF5-DAF27B8D63A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8183E157-625A-4503-B40A-9CF007B8D764"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*","matchCriteriaId":"0734D1E1-2F59-4832-875F-AB03994B8992"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"43F5B5E9-BB13-4222-816D-961EEE2F05A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6988E176-25D8-42E8-918F-E0C8BD5AC41D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4C366A02-074C-4F98-AE68-30E0FF85CD00"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"311646FD-B277-450D-8B15-00E38A181794"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D114762-179F-42A3-A3D5-07F288EA1A39"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:*","matchCriteriaId":"A15BA659-19D1-49AA-B249-EAE5E63B9B9A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBA4EA4-361A-42F2-B58E-D2327E3FB7D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"806B901C-82C1-4C5F-8C90-0A324F1B676E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_8000v:-:*:*:*:*:*:*:*","matchCriteriaId":"83EBB751-21AF-4B5F-BB6D-A18FC760781F"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-1702","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-05-13T20:15:07.950","lastModified":"2026-06-17T04:22:56.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability."},{"lang":"es","value":"El firmware de la serie SonicWall SMA1000 versiones 12.4.0, 12.4.1-02965 y versiones anteriores, aceptan una entrada controlada por el usuario que especifica un enlace a un sitio externo y usa ese enlace en un redireccionamiento que conlleva a una vulnerabilidad de redireccionamiento abierto"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA1000","versions":[{"version":"12.4.0","status":"affected"},{"version":"12.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"17505971-4213-4CD8-BFCA-C2709ED1D7A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3AD1484C-6DC2-40E8-A423-391F75809A07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*","matchCriteriaId":"17BDC1B0-BE6A-4680-A78E-5338AD709095"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CAF7029-6661-4935-BFF5-DAF27B8D63A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8183E157-625A-4503-B40A-9CF007B8D764"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*","matchCriteriaId":"0734D1E1-2F59-4832-875F-AB03994B8992"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"43F5B5E9-BB13-4222-816D-961EEE2F05A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6988E176-25D8-42E8-918F-E0C8BD5AC41D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4C366A02-074C-4F98-AE68-30E0FF85CD00"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"311646FD-B277-450D-8B15-00E38A181794"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D114762-179F-42A3-A3D5-07F288EA1A39"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:*","matchCriteriaId":"A15BA659-19D1-49AA-B249-EAE5E63B9B9A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBA4EA4-361A-42F2-B58E-D2327E3FB7D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"806B901C-82C1-4C5F-8C90-0A324F1B676E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_8000v:-:*:*:*:*:*:*:*","matchCriteriaId":"83EBB751-21AF-4B5F-BB6D-A18FC760781F"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22281","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-05-13T20:15:08.080","lastModified":"2026-06-17T04:28:10.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en el cliente Windows de SonicWall SSL-VPN NetExtender (32 y 64 bits) en versiones 10.2.322 y anteriores, permite a un atacante ejecutar potencialmente código arbitrario en el sistema operativo Windows del host"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall NetExtender Windows (32 and 64 bit) Client","versions":[{"version":"10.2.322 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"10.2.322","matchCriteriaId":"1FC487FA-8D12-453E-80EA-800F6E2B0F67"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22282","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-05-13T20:15:08.133","lastModified":"2026-06-17T04:28:10.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability."},{"lang":"es","value":"El firmware de la serie SonicWall SMA1000 versiones 12.4.0, 12.4.1-02965 y versiones anteriores, restringe incorrectamente el acceso a un recurso mediante conexiones HTTP de un actor no autorizado, conllevando a una vulnerabilidad de control de acceso inapropiado"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA1000","versions":[{"version":"12.4.0","status":"affected"},{"version":"12.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"17505971-4213-4CD8-BFCA-C2709ED1D7A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6200_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3AD1484C-6DC2-40E8-A423-391F75809A07"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*","matchCriteriaId":"17BDC1B0-BE6A-4680-A78E-5338AD709095"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9CAF7029-6661-4935-BFF5-DAF27B8D63A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_6210_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8183E157-625A-4503-B40A-9CF007B8D764"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_6210:-:*:*:*:*:*:*:*","matchCriteriaId":"0734D1E1-2F59-4832-875F-AB03994B8992"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"43F5B5E9-BB13-4222-816D-961EEE2F05A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7200_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6988E176-25D8-42E8-918F-E0C8BD5AC41D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4C366A02-074C-4F98-AE68-30E0FF85CD00"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"311646FD-B277-450D-8B15-00E38A181794"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_7210_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D114762-179F-42A3-A3D5-07F288EA1A39"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_7210:-:*:*:*:*:*:*:*","matchCriteriaId":"A15BA659-19D1-49AA-B249-EAE5E63B9B9A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"BDBA4EA4-361A-42F2-B58E-D2327E3FB7D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_8000v_firmware:12.4.1:*:*:*:*:*:*:*","matchCriteriaId":"806B901C-82C1-4C5F-8C90-0A324F1B676E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_8000v:-:*:*:*:*:*:*:*","matchCriteriaId":"83EBB751-21AF-4B5F-BB6D-A18FC760781F"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-1703","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-06-08T09:15:08.417","lastModified":"2026-06-17T04:22:57.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack."},{"lang":"es","value":"Una neutralización inapropiada de elementos especiales en la interfaz de administración de la serie SonicWall SSL-VPN SMA100 permite a un atacante remoto autenticado inyectar comandos del Sistema Operativo, lo que conlleva potencialmente a una vulnerabilidad de ejecución de comandos remota o un ataque de denegación de servicio (DoS)"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"10.2.1.4-31sv and earlier","status":"affected"},{"version":"10.2.0.9-41sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.4-31sv","matchCriteriaId":"000DA676-7360-4280-9966-579DD068CE68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.4-31sv","matchCriteriaId":"E42143BB-7CC5-435C-82A4-DA44A74AD9CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.4-31sv","matchCriteriaId":"B22C0EDE-9D50-4FEF-AA95-11B98C212F0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.0.9-41sv","matchCriteriaId":"077A6F1D-5D17-4728-AE84-CF1CF7C975BB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.0.9-41sv","matchCriteriaId":"5EB75691-5920-48A2-ABB3-9FEB47AF516C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.0.9-41sv","matchCriteriaId":"C120819C-F175-4FAA-A198-2931F48F01C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-2323","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-07-29T20:15:13.223","lastModified":"2026-06-17T04:41:41.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions"},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en una entrada de usuario permite a un usuario malicioso autenticado llevar a cabo una ejecución de código remota en el sistema anfitrión. Esta vulnerabilidad afecta a SonicWall Switch versiones 1.1.1-2s y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Switch","versions":[{"version":"1.1.1.0-2s and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws12-10fpoe_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"2F4A15BB-4E46-4CD2-8400-EF5F4B01B249"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws12-10fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"AC1B14D9-15C7-4490-9A2C-4FD9462CF465"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws12-8_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"30379D90-16A7-4F69-879B-7C2561C56DF5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws12-8:-:*:*:*:*:*:*:*","matchCriteriaId":"F93E9E20-D465-490B-B2E0-A92670684ECE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws12-8poe_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"FD691E0B-803E-4747-8A4F-346B7DAF9388"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws12-8poe:-:*:*:*:*:*:*:*","matchCriteriaId":"A756CC39-180C-4293-8A45-7C55DC88639B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws14-24_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"DF279AEE-9D3F-45F6-AB43-A1F96F4F8AA8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-24:-:*:*:*:*:*:*:*","matchCriteriaId":"72DF3E57-4840-4327-9796-D92F663FFF4E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws14-24fpoe_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"1D41CA3A-E9C4-4708-A98C-3B7651F5A321"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-24fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"68C4A661-5DAE-41B2-8D51-8E8F0AB4E26E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws14-48_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"5A9257A0-78F2-4CC5-92A6-271E3AD734F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-48:-:*:*:*:*:*:*:*","matchCriteriaId":"04079B4A-8CF2-4D17-B9AB-CF9A84692CAD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sws14-48fpoe_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.0-3","matchCriteriaId":"139E15A5-C97A-410C-A7CA-C56B6182127F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sws14-48fpoe:-:*:*:*:*:*:*:*","matchCriteriaId":"49B54692-77FD-411F-90F4-AAE31E48D5B8"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22280","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-07-29T21:15:09.470","lastModified":"2026-06-17T04:28:09.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions."},{"lang":"es","value":"Una Neutralización Inadecuada de Elementos Especiales usados en un Comando SQL conllevando a una vulnerabilidad de inyección SQL no autenticada, que afecta a SonicWall GMS versión 9.3.1-SP2-Hotfix1, Analytics On-Prem versiones 2.5.0.3-2520 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall GMS","versions":[{"version":"9.3.1-SP2-Hotfix1 and earlier","status":"affected"}]},{"vendor":"SonicWall","product":"SonicWall Analytics On-Prem","versions":[{"version":"2.5.0.3-2520 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:on-prem:*:*:*","versionEndIncluding":"2.5.0.3-2520","matchCriteriaId":"C7FFD1D8-11E9-4208-840E-33090DF70E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.1","matchCriteriaId":"B04B0EA0-DE37-495D-9417-8FAF48F1A064"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.1:-:*:*:*:*:*:*","matchCriteriaId":"215C71C7-2CA8-4017-AF17-995002FF3100"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0007","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-2324","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-07-29T21:15:09.537","lastModified":"2026-06-17T04:41:41.797","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions"},{"lang":"es","value":"Una vulnerabilidad de Comprobación de Seguridad Implementada Inapropiadamente en SonicWall Hosted Email Security conlleva a una omisión del servicio de seguridad Capture ATP en el dispositivo. Esta vulnerabilidad afecta a versiones 10.0.17.7319 y anteriores"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Email Security","versions":[{"version":"10.0.17.7319 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-290"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.17.7319","matchCriteriaId":"243A66AC-CDBA-49BC-B13B-3A719FE74C87"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-2915","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-08-26T21:15:08.867","lastModified":"2026-06-17T04:42:49.247","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service (DoS) on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región Heap de la memoria en el dispositivo SonicWall SMA100 permite a un atacante remoto autenticado causar una Denegación de Servicio (DoS) en el dispositivo o conllevar potencialmente a una ejecución de código. Esta vulnerabilidad afecta a versiones 10.2.1.5-34sv y anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","versions":[{"version":"10.2.1.5-34sv and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.5-34sv","matchCriteriaId":"E050298A-9A68-406E-96BE-E39C9872E037"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.5-34sv","matchCriteriaId":"B9FB0A71-9D67-4042-98F0-27483D3CD061"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.5-34sv","matchCriteriaId":"59B6F74D-1FCA-451E-B834-2332E528F68D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.5-34sv","matchCriteriaId":"AE0BA587-99AF-4D6D-B3F1-18F38E90B085"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.5-34sv","matchCriteriaId":"449CADE6-31C5-458A-8C65-BAD1A7F23C12"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0019","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20030","sourceIdentifier":"PSIRT@sonicwall.com","published":"2022-10-13T11:15:09.747","lastModified":"2026-06-17T03:33:10.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files."},{"lang":"es","value":"SonicWall GMS es vulnerable a la manipulación de rutas de archivos, lo que hace que un atacante no autenticado pueda acceder al directorio web que contiene los archivos binarios y de configuración de la aplicación"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall GMS","versions":[{"version":"prior GMS 9.3.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-16T13:44:18.458231Z","id":"CVE-2021-20030","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-0126","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-01-19T20:15:10.850","lastModified":"2026-06-17T05:24:50.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory."},{"lang":"es","value":"Vulnerabilidad de path traversal de autenticación previa en la versión 12.4.2 del firmware SMA1000, que permite a un atacante no autenticado acceder a archivos y directorios arbitrarios almacenados fuera del directorio raíz web."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall SMA1000","versions":[{"version":"12.4.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-02T15:51:23.660705Z","id":"CVE-2023-0126","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma1000_firmware:12.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A0BFD82B-F859-4E05-978E-FB1ADBBBE65E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma1000:-:*:*:*:*:*:*:*","matchCriteriaId":"DB78952C-B6BB-4A5A-A216-BA64AAC83D4D"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-0655","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-02-14T03:15:09.883","lastModified":"2026-06-17T05:26:01.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicWall Email Security","versions":[{"version":"10.0.19.7431 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-20T20:39:17.305466Z","id":"CVE-2023-0655","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-209"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-209"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.19.7431","matchCriteriaId":"59F4EE0A-5F97-47BF-83B2-CEDCFAA6570B"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0002","source":"PSIRT@sonicwall.com","tags":["Broken Link"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2023-0656","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-03-02T22:15:09.487","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS NSv 6.5.4.4-44v-21-1551 and earlier","status":"affected"},{"version":"SonicOS NSsp 7.0.1-5083 and earlier","status":"affected"},{"version":"SonicOS 7.0.1-5095 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-07T17:27:55.650091Z","id":"CVE-2023-0656","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5111","matchCriteriaId":"D3048789-B1A5-4C58-9EA8-A0ABF8EE693E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5083","matchCriteriaId":"C61C96E2-0679-4555-A5D6-75E1BE44CB1F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4-44v-21-1551","matchCriteriaId":"715F6C7A-0A62-4261-8DD1-17F34AD5F710"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-1101","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-03-02T22:15:09.560","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","versions":[{"version":"SonicOS 6.5.4.11-97n and earlier","status":"affected"},{"version":"SonicOS NSv 6.5.4.4-44v-21-1551 and earlier","status":"affected"},{"version":"SonicOS NSsp 7.0.1-5083 and earlier","status":"affected"},{"version":"SonicOS 7.0.1-5095 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-07T19:18:06.954225Z","id":"CVE-2023-1101","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5111","matchCriteriaId":"680A1C61-AA45-4CA1-88F6-95EC0A275E41"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5083","matchCriteriaId":"C61C96E2-0679-4555-A5D6-75E1BE44CB1F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.4-44v-21-1551","matchCriteriaId":"715F6C7A-0A62-4261-8DD1-17F34AD5F710"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.4.11-97n","matchCriteriaId":"24C1B08A-B303-44F3-9285-1539588476BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"60219D0D-240E-4C5E-ADEE-0144DB076F28"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"260EAE19-8320-4616-8833-B214D41FA98E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"94F17A77-EB74-4815-A026-6116755EFB37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp12400:-:*:*:*:*:*:*:*","matchCriteriaId":"DD310CFE-1171-471A-8B29-A8974F06FF5C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp12800:-:*:*:*:*:*:*:*","matchCriteriaId":"462177B2-E0EC-494A-93A8-9582DCECC368"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm10200:-:*:*:*:*:*:*:*","matchCriteriaId":"D96A9430-B9FC-48FE-8507-E7694F80EF5B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm10400:-:*:*:*:*:*:*:*","matchCriteriaId":"A515B0BE-3655-48A1-B113-9A4E39A40CE9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm10800:-:*:*:*:*:*:*:*","matchCriteriaId":"40C227CA-D865-47CC-AD4D-96ED19892BDA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm9200:-:*:*:*:*:*:*:*","matchCriteriaId":"3547DE9C-A657-4AB6-AD00-5185BE7D227E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm9400:-:*:*:*:*:*:*:*","matchCriteriaId":"88DB2D0B-8199-4241-A826-4BD91AB5D4E4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm9600:-:*:*:*:*:*:*:*","matchCriteriaId":"7079B7DB-CBC1-4116-929B-956C361AF764"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*","matchCriteriaId":"FCBF16D6-4C60-440D-95AB-986ABC4F9100"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300:-:*:*:*:*:*:*:*","matchCriteriaId":"09678BBE-7603-41D2-BF09-415CA33C7EFA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300p:-:*:*:*:*:*:*:*","matchCriteriaId":"7003DBEF-CA74-4429-B567-5CFFB83762E6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz300w:-:*:*:*:*:*:*:*","matchCriteriaId":"A8AC8EAE-99BE-4889-9978-5083F71D7178"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350:-:*:*:*:*:*:*:*","matchCriteriaId":"479B1418-CA62-4B24-A5DB-21F488941754"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz350w:-:*:*:*:*:*:*:*","matchCriteriaId":"D3E0AB47-5EE3-4F2F-B442-DA48C58C44D6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400:-:*:*:*:*:*:*:*","matchCriteriaId":"D50B19A6-80C4-4FF7-9CD5-58938641D3DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz400w:-:*:*:*:*:*:*:*","matchCriteriaId":"745643D6-9336-4FBE-9625-99599DFBB8A2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500:-:*:*:*:*:*:*:*","matchCriteriaId":"C09B5BCD-C830-4C67-B966-1CA499F21D04"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz500w:-:*:*:*:*:*:*:*","matchCriteriaId":"FA61303F-736E-411F-AEF3-6335C0795138"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600:-:*:*:*:*:*:*:*","matchCriteriaId":"3506950B-2404-41D2-8EF3-1694777D9EEA"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz600p:-:*:*:*:*:*:*:*","matchCriteriaId":"7B4C9916-AD16-4E31-90A6-2AD577EA9783"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34123","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T00:15:24.387","lastModified":"2026-06-17T06:02:56.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-06T17:00:38.382269Z","id":"CVE-2023-34123","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:virtual_appliance:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"12CB3495-2949-4D79-98F9-2156B0296C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:windows:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"6215D18A-7254-453B-93BF-4FFD8417D0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:virtual_appliance:*:*:*","matchCriteriaId":"9F193D8D-EC75-49E4-9510-74534518A276"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:windows:*:*:*","matchCriteriaId":"7D33D05B-F776-44C7-BE77-B0656C9449A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:virtual_appliance:*:*:*","matchCriteriaId":"C00FB351-6120-4C1B-B621-2D7C1ED13966"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:windows:*:*:*","matchCriteriaId":"654B1441-A169-499C-B061-8E49535FC60D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.0.4","matchCriteriaId":"3141B9EA-D34E-4F30-B4D8-413505FBEC53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:2.5.0.4-r7:*:*:*:*:*:*:*","matchCriteriaId":"8C05380F-06DD-40DE-B5F3-E6E2E188D229"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34124","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T01:15:08.723","lastModified":"2026-06-17T06:02:56.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T18:53:33.391833Z","id":"CVE-2023-34124","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-305"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34125","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T01:15:08.783","lastModified":"2026-06-17T06:02:56.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-05T15:34:38.926559Z","id":"CVE-2023-34125","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-27"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34126","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T01:15:08.837","lastModified":"2026-06-17T06:02:57.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-31T17:58:06.640728Z","id":"CVE-2023-34126","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34127","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T01:15:08.893","lastModified":"2026-06-17T06:02:57.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:27:37.617340Z","id":"CVE-2023-34127","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34128","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T01:15:08.950","lastModified":"2026-06-17T06:02:57.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-31T17:55:38.893138Z","id":"CVE-2023-34128","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-260"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34129","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T02:15:09.303","lastModified":"2026-06-17T06:02:57.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T18:52:57.463645Z","id":"CVE-2023-34129","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34130","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T02:15:09.363","lastModified":"2026-06-17T06:02:57.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T19:55:20.321751Z","id":"CVE-2023-34130","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34131","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.470","lastModified":"2026-06-17T06:02:57.720","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker to access restricted web pages. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T19:18:09.777415Z","id":"CVE-2023-34131","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34132","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.533","lastModified":"2026-06-17T06:02:57.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T19:15:29.760186Z","id":"CVE-2023-34132","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-836"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34133","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.590","lastModified":"2026-06-17T06:02:57.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:25.051526Z","id":"CVE-2023-34133","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34134","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.647","lastModified":"2026-06-17T06:02:58.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T18:52:28.717741Z","id":"CVE-2023-34134","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34135","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.707","lastModified":"2026-06-17T06:02:58.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T18:51:59.978476Z","id":"CVE-2023-34135","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-36"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34136","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.770","lastModified":"2026-06-17T06:02:58.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T18:50:17.908815Z","id":"CVE-2023-34136","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34137","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-07-13T03:15:09.827","lastModified":"2026-06-17T06:02:58.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.\n\n"}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.2-SP1 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"Analytics","defaultStatus":"unknown","versions":[{"version":"2.5.0.4-R7 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-30T18:49:13.419958Z","id":"CVE-2023-34137","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-305"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.0.4-r7","matchCriteriaId":"A5BFA6B7-2070-4FCA-B27C-5ED1047B1101"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","versionEndExcluding":"9.3.2","matchCriteriaId":"02CDB54F-B795-42B3-A406-22D7E4A03ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*","matchCriteriaId":"2E8493ED-1A01-4FAA-9608-4481DDD0D69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*","matchCriteriaId":"89A96771-621F-4D0D-B667-0A99F5F76789"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.sonicwall.com/support/notices/230710150218060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44217","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-03T08:15:36.000","lastModified":"2026-06-17T06:27:09.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nA local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.\n\n"},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios local en el cliente MSI SonicWall Net Extender para Windows 10.2.336 y versiones anteriores permite a un usuario local con pocos privilegios obtener privilegios de System mediante la ejecución de la funcionalidad de reparación."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows"],"versions":[{"version":"10.2.336 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"netextender","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.336","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-20T18:40:56.967797Z","id":"CVE-2023-44217","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"10.2.336","matchCriteriaId":"F79C094F-9986-4B09-800D-2F1DBE23B8FD"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0013","source":"PSIRT@sonicwall.com","tags":["Broken Link"]},{"url":"https://github.com/advisories/GHSA-jw5c-8746-98g5","source":"nvd@nist.gov","tags":["Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2023-44218","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-03T08:15:36.067","lastModified":"2026-06-17T06:27:09.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nA flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation (LPE) vulnerability.\n\n"},{"lang":"es","value":"Una falla dentro de la función SonicWall NetExtender Pre-Logon permite que un usuario no autorizado obtenga acceso al sistema operativo Windows host con privilegios de nivel 'SYSTEM', lo que genera una vulnerabilidad de escalada de privilegios local (LPE)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"10.2.336 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"netextender","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.336","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"PSIRT@sonicwall.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-20T19:01:07.121276Z","id":"CVE-2023-44218","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-267"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"10.2.336","matchCriteriaId":"F79C094F-9986-4B09-800D-2F1DBE23B8FD"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-39276","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:11.573","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nSonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash.\n\n\n"},{"lang":"es","value":"La vulnerabilidad de desbordamiento del búfer de autenticación posterior de SonicOS en el endpoint de la URL getBookmarkList.json provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T16:04:23.771929Z","id":"CVE-2023-39276","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-39277","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:11.660","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash."},{"lang":"es","value":"La vulnerabilidad de desbordamiento del búfer de autenticación posterior de SonicOS en los endpoints de URL sonicflow.csv y appflowsessions.csv provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T16:02:52.041284Z","id":"CVE-2023-39277","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-39278","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:11.727","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash.\n"},{"lang":"es","value":"La falla de aserción del usuario posterior a la autenticación de SonicOS conduce a una vulnerabilidad de desbordamiento del búfer a través de main.cgi que provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T16:01:40.078298Z","id":"CVE-2023-39278","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-39279","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:11.790","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash."},{"lang":"es","value":"La vulnerabilidad de desbordamiento del búfer basado posterior a la autenticación de SonicOS en el endpoint de URL getPacketReplayData.json provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T16:00:24.050497Z","id":"CVE-2023-39279","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-39280","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:11.853","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS p\n\nost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash.\n\n"},{"lang":"es","value":"La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en los endpoints de URL ssoStats-s.xml y ssoStats-s.wri provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T15:59:13.568147Z","id":"CVE-2023-39280","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41711","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:12.027","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash."},{"lang":"es","value":"La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en los endpoint de URL sonicwall.exp, prefs.exp provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T15:38:20.952791Z","id":"CVE-2023-41711","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41712","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:12.093","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash."},{"lang":"es","value":"La vulnerabilidad de desbordamiento del búfer posterior a la autenticación de SonicOS en el extremo URL de SSL VPN plainprefs.exp provoca una falla del firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T15:36:06.568443Z","id":"CVE-2023-41712","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41713","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:12.160","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function."},{"lang":"es","value":"SonicOS utiliza la vulnerabilidad de contraseña codificada en la función de demostración 'dynHandleBuyToolbar'."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sonicos","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sonicos:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"7.0.1-5119","versionType":"custom","status":"affected"},{"version":"0","lessThan":"7.0.1-5129","versionType":"custom","status":"affected"},{"version":"0","lessThan":"6.5.4.4-44v-21-2079","versionType":"custom","status":"affected"},{"version":"0","lessThan":"6.5.4.12-101n","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-13T19:29:35.513087Z","id":"CVE-2023-41713","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-259"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41715","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-17T23:15:12.227","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunnel.\n"},{"lang":"es","value":"La vulnerabilidad de administración de privilegios inadecuada posterior a la autenticación de SonicOS en el túnel VPN SSL de SonicOS permite a los usuarios elevar sus privilegios dentro del túnel."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","modules":["Management","SSLVPN"],"versions":[{"version":"7.0.1-5119 and earlier versions","status":"affected"},{"version":"7.0.1-5129 and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2079 and earlier versions","status":"affected"},{"version":"6.5.4.12-101n and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-11-15T16:39:20.290510Z","id":"CVE-2023-41715","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5145","matchCriteriaId":"2C7049FD-8088-4FCE-886A-F4CF5E287D1C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa2700:-:*:*:*:*:*:*:*","matchCriteriaId":"4AFAFCEC-A61E-40EB-87B9-7449751CCAF8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa3700:-:*:*:*:*:*:*:*","matchCriteriaId":"7BC4F132-D29A-4974-86DA-6E35AB05327C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa4700:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE365CF-DBE9-4C84-AB0C-0CAB7C74ED40"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa5700:-:*:*:*:*:*:*:*","matchCriteriaId":"016BB564-CEFC-4E0C-9D38-D9C4C8B2E492"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa6700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D95DCC6-6F48-4A79-A9F6-BDB1AEFA2180"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp10700:-:*:*:*:*:*:*:*","matchCriteriaId":"15F2741F-3C32-4075-A224-BE272B50E3D9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp11700:-:*:*:*:*:*:*:*","matchCriteriaId":"AC883B32-987C-4D34-8BBF-39E2C57A62EE"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp13700:-:*:*:*:*:*:*:*","matchCriteriaId":"C72EA66A-320C-4D5E-B3F6-6D5F8733E2F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp15700:-:*:*:*:*:*:*:*","matchCriteriaId":"F8B4A33E-8456-451E-AAF4-7F48BEDACF45"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.4-44v-21-2340","matchCriteriaId":"9B91638E-FB80-4C65-8A37-827488CB3E2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.13-105n","matchCriteriaId":"0D74A465-1A72-4A02-8A54-FD502BD28119"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2600:-:*:*:*:*:*:*:*","matchCriteriaId":"F86D13F9-D41E-4230-9116-A781FFAEF00D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44219","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-27T08:15:31.060","lastModified":"2026-06-17T06:27:09.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges through running the recovery feature."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios local en SonicWall Directory Services Connector Windows MSI client 4.1.21 y versiones anteriores permite a un usuario local con pocos privilegios obtener permisos del sistema mediante la ejecución de la función de recuperación."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Directory Services Connector","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"4.1.21 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"directory_services_connector","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:directory_services_connector:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"4.1.21","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-09T15:20:24.267411Z","id":"CVE-2023-44219","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:directory_services_connector:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.22","matchCriteriaId":"0292FDEB-2F8B-41AC-96B6-2A985D9EFD16"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0016","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44220","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-10-27T08:15:31.207","lastModified":"2026-06-17T06:27:09.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system."},{"lang":"es","value":"El cliente SonicWall NetExtender Windows (32 bits y 64 bits) 10.2.336 y versiones anteriores tienen una vulnerabilidad de Secuestro de Orden de Búsqueda de DLL en el componente DLL de inicio. La explotación exitosa a través de un atacante local podría resultar en la ejecución de comandos en el sistema de destino."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","32 bit","64 bit"],"versions":[{"version":"10.2.336 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"netextender","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:netextender:10.2.336:*:*:*:*:windows:*:*"],"versions":[{"version":"0","lessThan":"10.2.336","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-09T15:16:01.758354Z","id":"CVE-2023-44220","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"10.2.336","matchCriteriaId":"F79C094F-9986-4B09-800D-2F1DBE23B8FD"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0017","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44221","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-12-05T21:15:07.150","lastModified":"2026-06-17T06:27:09.827","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability."},{"lang":"es","value":"La neutralización inadecuada de elementos especiales en la interfaz de administración SMA100 SSL-VPN permite que un atacante remoto autenticado con privilegios administrativos inyecte comandos arbitrarios como un usuario \"nobody\", lo que podría provocar una vulnerabilidad de inyección de comandos del sistema operativo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["SMA 200","SMA 210","SMA 400","SMA 410","SMA 500v"],"versions":[{"version":"10.2.1.9-57sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-02T03:55:16.588577Z","id":"CVE-2023-44221","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-05-01","cisaActionDue":"2025-05-22","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"4674E718-3642-4042-82DE-49B845CF2DC6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"5990A44B-DD34-4B32-B233-9062902EBE9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"C82E099E-AAE1-4BD3-B0C0-38326201586C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"E422E9C1-597B-468F-A634-23C54C1F7C74"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"B70F00FF-A14D-40F3-9381-817542DE6A7D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44221","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-5970","sourceIdentifier":"PSIRT@sonicwall.com","published":"2023-12-05T21:15:07.667","lastModified":"2026-06-17T06:49:46.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass."},{"lang":"es","value":"La autenticación incorrecta en el portal de oficina virtual SMA100 SSL-VPN permite que un atacante autenticado remoto cree un usuario de dominio externo idéntico utilizando caracteres acentuados, lo que resulta en una omisión de MFA."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["SMA 200","SMA 210","SMA 400","SMA 410","SMA 500v"],"versions":[{"version":"10.2.1.9-57sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"4674E718-3642-4042-82DE-49B845CF2DC6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"5990A44B-DD34-4B32-B233-9062902EBE9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"C82E099E-AAE1-4BD3-B0C0-38326201586C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"E422E9C1-597B-468F-A634-23C54C1F7C74"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.2.1.9-57sv","matchCriteriaId":"B70F00FF-A14D-40F3-9381-817542DE6A7D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-6340","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-01-18T00:15:38.080","lastModified":"2026-06-17T06:50:33.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver.  The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability."},{"lang":"es","value":"SonicWall Capture Client versión 3.7.10, NetExtender client versión 10.2.337 y versiones anteriores se instalan con el controlador sfpmonitor.sys. Se ha descubierto que el controlador es vulnerable a la denegación de servicio (DoS) causada por una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Capture Client","defaultStatus":"unknown","platforms":["Windows"],"versions":[{"version":"3.7.10 and earlier versions","status":"affected"}]},{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"10.2.337 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T15:23:04.082962Z","id":"CVE-2023-6340","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:capture_client:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.10","matchCriteriaId":"9EA62B9D-9A7C-447A-BA0C-5ECFF6C74515"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndIncluding":"10.2.337","matchCriteriaId":"BB83F5B1-CD28-4AC4-913C-48C0A7EE32FB"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-22394","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-02-08T02:15:07.620","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. \n\nThis issue affects only firmware version SonicOS 7.1.1-7040.\n\n"},{"lang":"es","value":"Se ha identificado una vulnerabilidad de autenticación incorrecta en la función SSL-VPN de SonicWall SonicOS, que en condiciones específicas podría permitir que un atacante remoto omita la autenticación. Este problema afecta únicamente a la versión de firmware SonicOS 7.1.1-7040."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","versions":[{"version":"SonicOS 7.1.1-7040","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sonicos","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*"],"versions":[{"version":"sonicos 7.1.1-7040","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-08T17:20:54.081829Z","id":"CVE-2024-22394","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.1.1-7040:*:*:*:*:*:*:*","matchCriteriaId":"10C8F8FE-C22C-4CE0-86AE-D247042A41DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:t2270:-:*:*:*:*:*:*:*","matchCriteriaId":"CBB8E979-629B-48DF-BA96-40D9EF197732"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-22395","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-02-24T00:15:45.673","lastModified":"2026-06-17T07:11:19.440","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de control de acceso inadecuado en el portal de oficina virtual SMA100 SSL-VPN, que en condiciones específicas podría permitir que un atacante autenticado remoto asocie la aplicación móvil MFA de otro usuario."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","versions":[{"version":"10.2.1.10-62sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"PSIRT@sonicwall.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-28T20:22:40.072930Z","id":"CVE-2024-22395","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.11-65sv","matchCriteriaId":"6C75280E-A732-48B9-B8F3-CB7C572F8619"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.11-65sv","matchCriteriaId":"31C19423-BCCE-482F-8FDD-B380D9CAED91"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.11-65sv","matchCriteriaId":"6F45AF4D-2BD4-4242-86A4-03DEE95F1E09"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.11-65sv","matchCriteriaId":"D48A31D7-5066-405F-8F27-C52613E36306"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.11-65sv","matchCriteriaId":"B38CFE8A-C4A4-4321-8EDD-CDF177090177"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-22396","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-03-14T04:15:09.080","lastModified":"2026-06-17T07:11:19.567","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer de almacenamiento dinámico en SonicOS a través de IPSec permite que un atacante remoto en condiciones específicas cause Denegación de Servicio (DoS) y potencialmente ejecute código arbitrario enviando un payload IKEv2 especialmente manipulado."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6","Gen7"],"versions":[{"version":"7.0.1-5145 and earlier versions","status":"affected"},{"version":"7.1.1-7047 and earlier versions","status":"affected"},{"version":"6.5.4.13-105n and earlier versions","status":"affected"},{"version":"6.5.4.4-44v-21-2340 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sonicos","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sonicos:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"7.0.1-5145","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"7.1.1-7047","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"6.5.4.13-105n","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"6.5.4.4-44v-21-2340","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-14T16:30:28.118688Z","id":"CVE-2024-22396","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0004","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-22397","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-03-14T04:15:09.297","lastModified":"2026-06-17T07:11:19.717","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code."},{"lang":"es","value":"La neutralización inadecuada de la entrada durante la generación de la página web (\"Cross-site Scripting\") en el portal SonicOS SSLVPN permite a un atacante remoto autenticado como usuario \"administrador\" del firewall almacenar y ejecutar código JavaScript arbitrario."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7"],"versions":[{"version":"7.0.1-5145 and earlier versions","status":"affected"},{"version":"7.1.1-7047 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.7,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-14T19:38:51.641190Z","id":"CVE-2024-22397","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0005","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-22398","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-03-14T04:15:09.417","lastModified":"2026-06-17T07:11:19.863","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system."},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (Path Traversal) en SonicWall Email Security Appliance podría permitir que un atacante remoto con privilegios administrativos lleve a cabo un ataque directory traversal y elimine archivos arbitrarios del sistema de archivos del dispositivo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.0.26.7807 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"email_security","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.0.26.7807","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-14T15:34:06.664009Z","id":"CVE-2024-22398","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0006","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-29010","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-05-01T18:15:17.873","lastModified":"2026-06-17T07:22:14.800","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the disclosure of sensitive information.\n\nThis issue affects GMS: 9.3.4 and earlier versions.\n\n"},{"lang":"es","value":"El documento XML procesado en el endpoint URL de GMS ECM es vulnerable a la inyección de entidad externa XML (XXE), lo que podría resultar en la divulgación de información confidencial. Este problema afecta a GMS: 9.3.4 y versiones anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.4 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"global_management_system","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:global_management_system:-:*:*:*:*:*:*:*"],"versions":[{"version":"-","lessThanOrEqual":"9.3.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"PSIRT@sonicwall.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-02T15:21:02.204343Z","id":"CVE-2024-29010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-611"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-29011","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-05-01T19:15:22.627","lastModified":"2026-06-17T07:22:14.907","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability.\n\nThis issue affects GMS: 9.3.4 and earlier versions.\n"},{"lang":"es","value":"El uso de una contraseña codificada en el endpoint de GMS ECM genera una vulnerabilidad de omisión de autenticación. Este problema afecta a GMS: 9.3.4 y versiones anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","versions":[{"version":"9.3.4 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"global_management_system","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:global_management_system:-:*:*:*:*:*:*:*"],"versions":[{"version":"-","lessThanOrEqual":"9.3.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"PSIRT@sonicwall.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-02T04:00:12.242592Z","id":"CVE-2024-29011","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-259"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007","source":"PSIRT@sonicwall.com"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-29012","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-06-20T09:15:11.347","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause Denial of Service (DoS) via sscanf function."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila en el servidor HTTP de SonicOS permite que un atacante remoto autenticado provoque una denegación de servicio (DoS) a través de la función sscanf."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7"],"versions":[{"version":"7.1.1-7051 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-27T13:21:49.382881Z","id":"CVE-2024-29012","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5161","matchCriteriaId":"BE881F9C-CE9E-4D1B-92BA-D28B2B16178A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1","versionEndExcluding":"7.1.1-7058","matchCriteriaId":"FFC449BE-1EA7-42B9-BB33-4FF14A78D2B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.2","versionEndExcluding":"7.1.2-7019","matchCriteriaId":"A859C784-32BA-43BC-97BC-120047A67EEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-29013","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-06-20T09:15:11.543","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial of Service (DoS) via memcpy function."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en montón en SonicOS SSL-VPN permite que un atacante remoto autenticado provoque una denegación de servicio (DoS) a través de la función memcpy."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7"],"versions":[{"version":"7.1.1-7051 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-27T13:20:32.639743Z","id":"CVE-2024-29013","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5161","matchCriteriaId":"BE881F9C-CE9E-4D1B-92BA-D28B2B16178A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1","versionEndExcluding":"7.1.1-7058","matchCriteriaId":"FFC449BE-1EA7-42B9-BB33-4FF14A78D2B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.2","versionEndExcluding":"7.1.2-7019","matchCriteriaId":"A859C784-32BA-43BC-97BC-120047A67EEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0009","source":"PSIRT@sonicwall.com","tags":["Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-29014","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-07-18T08:15:02.173","lastModified":"2026-11-03T22:17:17.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update."},{"lang":"es","value":"Una vulnerabilidad en el cliente SonicWall SMA100 NetExtender Windows (32 y 64 bits) 10.2.339 y versiones anteriores permite a un atacante ejecutar código arbitrario al procesar una actualización del cliente EPC."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit","SMA100"],"versions":[{"version":"10.2.339 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"netextender","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.339","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-27T04:55:17.683933Z","id":"CVE-2024-29014","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:netextender:*:*:*:*:*:windows:*:*","versionEndExcluding":"10.2.341","matchCriteriaId":"E46B90F9-C6DD-44B8-AE8A-ABE37FF22D3E"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40764","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-07-18T08:15:02.340","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS)."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en montón en SonicOS IPSec VPN permite que un atacante remoto no autenticado provoque una denegación de servicio (DoS)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6","Gen7"],"versions":[{"version":"6.5.4.4-44v-21-2395 and older versions","status":"affected"},{"version":"7.0.1-5151 and older versions","status":"affected"},{"version":"7.1.1-7051 and older versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sonicos","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"6.5.4.4-44v-21-2395","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"7.0.1-5151","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"7.1.1-7051","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-18T13:27:59.874514Z","id":"CVE-2024-40764","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.v-21s-rc2457","matchCriteriaId":"8842B1FC-9CC4-4DB8-8119-B435CD33A5D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*","matchCriteriaId":"E0F29408-6F1B-495A-B5A1-032579C9A796"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*","matchCriteriaId":"4075658A-827B-441E-91A0-CC9E24C898BB"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*","matchCriteriaId":"4C720980-30BC-484B-96F9-E2ABF846ADF8"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*","matchCriteriaId":"16455054-94EF-40DF-9A5B-A6EAD152D556"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*","matchCriteriaId":"F39027A2-CD71-4355-8FF3-4C2CD580B2C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*","matchCriteriaId":"6F445BAB-D80A-4F2A-BDC8-4BE5175B542B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*","matchCriteriaId":"0FD1F4C9-D932-4D06-8FE7-BE69A855BD76"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*","matchCriteriaId":"B011DE32-D960-474F-BCCA-449E48228C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*","matchCriteriaId":"5E1BB409-C4E9-4014-B7BA-060FF00E2474"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.1-5161","matchCriteriaId":"BE881F9C-CE9E-4D1B-92BA-D28B2B16178A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndExcluding":"7.1.1-7058","matchCriteriaId":"797C9FA3-70EF-492A-ACA3-CE21422D5AAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012","source":"PSIRT@sonicwall.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40766","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-08-23T07:15:03.643","lastModified":"2026-09-21T21:17:02.403","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de control de acceso inadecuado en el acceso de administración de SonicWall SonicOS, que potencialmente conduce a un acceso no autorizado a recursos y, en condiciones específicas, provoca que el firewall falle. Este problema afecta a los dispositivos SonicWall Firewall Gen 5 y Gen 6, así como a los dispositivos Gen 7 que ejecutan SonicOS 7.0.1-5035 y versiones anteriores."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen5","Gen6","Gen7"],"versions":[{"version":"5.9.2.14-12o and older versions","status":"affected"},{"version":"6.5.4.14-109n and older versions","status":"affected"},{"version":"7.0.1-5035 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-09T14:11:51.602153Z","id":"CVE-2024-40766","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-09-09","cisaActionDue":"2024-09-30","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"SonicWall SonicOS Improper Access Control Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"5.9.2.14-13o","matchCriteriaId":"37E20C47-F8DA-4313-B9AD-C63CEA9D42C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*","matchCriteriaId":"C6B6B3FD-428E-4D6C-8C45-172CF4FB430D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.2.8-2n","matchCriteriaId":"0B16D102-B2BA-4F94-A42F-B8EB2E697907"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12400:-:*:*:*:*:*:*:*","matchCriteriaId":"F2F22AB1-044C-45F1-BD33-82BB46402363"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_12800:-:*:*:*:*:*:*:*","matchCriteriaId":"E62EAD79-2CD4-4479-B26A-A0C97B5B241A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm9800:-:*:*:*:*:*:*:*","matchCriteriaId":"FCBF16D6-4C60-440D-95AB-986ABC4F9100"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.4.15.116n","matchCriteriaId":"CAFD6E22-8E19-4B5A-85DE-7850FE0AE7CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350w:-:*:*:*:*:*:*:*","matchCriteriaId":"FF991212-3F2C-4F54-B96C-C33F500DB77B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-5035","matchCriteriaId":"34814AB8-5F1D-44B4-B53B-FC4FA794DDAA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40766","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-45315","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-10-11T13:15:15.883","lastModified":"2026-06-17T07:54:00.620","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service (DoS) attack."},{"lang":"es","value":"La vulnerabilidad de resolución de enlace incorrecta antes del acceso al archivo ('Seguimiento de enlace') en SonicWall Connect Tunnel (versión 12.4.3.271 y anteriores del cliente de Windows) permite a los usuarios con privilegios estándar crear carpetas y archivos arbitrarios, lo que potencialmente conduce a un ataque de denegación de servicio (DoS) local."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Connect Tunnel","defaultStatus":"unknown","platforms":["Windows"],"versions":[{"version":"12.4.3.271 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T15:22:27.509378Z","id":"CVE-2024-45315","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-45316","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-10-11T13:15:16.010","lastModified":"2026-06-17T07:54:00.763","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to delete arbitrary folders and files, potentially leading to local privilege escalation attack."},{"lang":"es","value":"La vulnerabilidad de resolución de enlace incorrecta antes del acceso al archivo ('Seguimiento de enlace') en SonicWall Connect Tunnel (versión 12.4.3.271 y anteriores del cliente de Windows) permite a los usuarios con privilegios estándar eliminar carpetas y archivos arbitrarios, lo que potencialmente conduce a un ataque de escalada de privilegios locales."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Connect Tunnel","defaultStatus":"unknown","platforms":["Windows"],"versions":[{"version":"12.4.3.271 and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"connect_tunnel","defaultStatus":"unknown","cpes":["cpe:2.3:a:sonicwall:connect_tunnel:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"12.4.3.271","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T15:35:14.195681Z","id":"CVE-2024-45316","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-45317","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-10-11T13:15:16.103","lastModified":"2026-06-17T07:54:00.903","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthenticated attacker to cause the SMA1000 server-side application to make requests to an unintended IP address."},{"lang":"es","value":"Una vulnerabilidad de Server-Side Request Forgery (SSRF) en las versiones de firmware 12.4.3-02676 y anteriores del dispositivo SMA1000 permite que un atacante remoto no autenticado haga que la aplicación del lado del servidor SMA1000 realice solicitudes a una dirección IP no deseada."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-02676 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T15:04:24.917758Z","id":"CVE-2024-45317","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-40763","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-12-05T14:15:20.850","lastModified":"2026-06-17T07:46:29.653","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de búfer basado en montón en SonicWall SMA100 SSLVPN debido al uso de strcpy. Esto permite a atacantes remotos autenticados provocar un desbordamiento de búfer basado en montón y potencialmente provocar la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.13-72sv and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sma100_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.1.13-72sv","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-06T00:00:00+00:00","id":"CVE-2024-40763","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"013150EC-D511-4219-8668-805B6E6EA43F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E74E33FD-25F4-443D-B20E-E5BE67310365"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"5E49B94A-119E-4C1D-81CD-3792F62AFE00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45318","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-12-05T14:15:21.000","lastModified":"2026-06-17T07:54:01.047","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution."},{"lang":"es","value":"Una vulnerabilidad en la interfaz de administración web SonicWall SMA100 SSLVPN permite a atacantes remotos provocar un desbordamiento de búfer basado en pila y potencialmente conducir a la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.13-72sv and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sma100_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.1.13-72sv","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-07T04:55:30.666847Z","id":"CVE-2024-45318","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"013150EC-D511-4219-8668-805B6E6EA43F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E74E33FD-25F4-443D-B20E-E5BE67310365"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"5E49B94A-119E-4C1D-81CD-3792F62AFE00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45319","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-12-05T14:15:21.127","lastModified":"2026-06-17T07:54:01.197","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the SonicWall SMA100 SSLVPN \n\nfirmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication."},{"lang":"es","value":"Una vulnerabilidad en el firmware SonicWall SMA100 SSLVPN 10.2.1.13-72sv y versiones anteriores permite que un atacante autenticado remoto pueda eludir el requisito del certificado durante la autenticación."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.13-72sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-05T16:55:47.591036Z","id":"CVE-2024-45319","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"013150EC-D511-4219-8668-805B6E6EA43F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E74E33FD-25F4-443D-B20E-E5BE67310365"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"5E49B94A-119E-4C1D-81CD-3792F62AFE00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-53702","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-12-05T14:15:21.880","lastModified":"2026-06-17T08:09:07.967","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret."},{"lang":"es","value":"Uso de una vulnerabilidad de generador de números pseudoaleatorios (PRNG) criptográficamente débil en el generador de código de respaldo SSLVPN SMA100 de SonicWall que, en ciertos casos, puede ser predicho por un atacante, exponiendo potencialmente el secreto generado."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.13-72sv and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sma100_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.1.13-72sv","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-05T15:07:30.378191Z","id":"CVE-2024-53702","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"013150EC-D511-4219-8668-805B6E6EA43F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E74E33FD-25F4-443D-B20E-E5BE67310365"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"5E49B94A-119E-4C1D-81CD-3792F62AFE00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-53703","sourceIdentifier":"PSIRT@sonicwall.com","published":"2024-12-05T14:15:22.020","lastModified":"2026-06-17T08:09:08.120","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution."},{"lang":"es","value":"Una vulnerabilidad en el firmware SonicWall SMA100 SSLVPN 10.2.1.13-72sv y versiones anteriores de la librería mod_httprp cargada por el servidor web Apache permite a atacantes remotos provocar un desbordamiento del búfer basado en pila y potencialmente conducir a la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.13-72sv and earlier versions","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sonicwall","product":"sma100_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"10.2.1.13-72sv","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-06T00:00:00+00:00","id":"CVE-2024-53703","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"7F9F8CFF-F9A3-40EF-A630-62A2AC4681FA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"013150EC-D511-4219-8668-805B6E6EA43F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E74E33FD-25F4-443D-B20E-E5BE67310365"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"E76E31C1-0DFA-4F7C-A7E9-9C9846AE6ED2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.14-75sv","matchCriteriaId":"5E49B94A-119E-4C1D-81CD-3792F62AFE00"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40762","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T07:15:26.730","lastModified":"2026-06-17T07:46:29.513","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass."},{"lang":"es","value":"Uso de un generador de números pseudoaleatorios criptográficamente débil (PRNG) en SonicOS SSLVPN authentication token generator que, en ciertos casos, puede ser predicho por un atacante, lo que potencialmente puede resultar en una omisión de la autenticación."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7 Hardware","Gen7 NSv","TZ80"],"versions":[{"version":"7.1.1-7058 and older versions","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:07:45.484453Z","id":"CVE-2024-40762","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-53704","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T07:15:27.203","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication."},{"lang":"es","value":"Una vulnerabilidad de autenticación incorrecta en SSLVPN authentication mechanism permite a un atacante remoto eludir la autenticación."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7 Hardware","Gen7 NSv","TZ80"],"versions":[{"version":"7.1.1-7058 and older versions","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-18T00:00:00+00:00","id":"CVE-2024-53704","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-02-18","cisaActionDue":"2025-03-11","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndIncluding":"7.1.1-7058","matchCriteriaId":"065DD610-7821-4A0E-9CC8-1255F1729126"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.1.2-7019:*:*:*:*:*:*:*","matchCriteriaId":"0131B5D1-47FF-4A35-8983-7C08E021F7A4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:8.0.0-8035:*:*:*:*:*:*:*","matchCriteriaId":"495254B3-5733-467E-AAA0-A9D385328C8E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53704","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-53705","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T07:15:27.363","lastModified":"2026-06-17T08:09:08.433","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall."},{"lang":"es","value":"Una vulnerabilidad de Server-Side Request Forgery en SonicOS SSH management interface permite a un atacante remoto establecer una conexión TCP a una dirección IP en cualquier puerto cuando el usuario está conectado al firewall."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7 Hardware","Gen7 NSv","TZ80","Gen6 Hardware"],"versions":[{"version":"6.5.4.15-117n and older versions","status":"affected"},{"version":"7.0.1-5161 and older versions","status":"affected"},{"version":"7.1.1-7058 and older versions","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:03:01.313230Z","id":"CVE-2024-53705","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-53706","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T07:15:27.520","lastModified":"2026-06-17T08:09:08.567","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to `root` and potentially lead to code execution."},{"lang":"es","value":"Una vulnerabilidad en Gen7 SonicOS Cloud platform NSv permite que un atacante local autenticado de forma remota y con bajos privilegios eleve los privilegios a \"superusuario\" y potencialmente conduzca a la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7 NSv Cloud platform"],"versions":[{"version":"7.1.1-7058 and older versions","status":"affected"},{"version":"7.1.2-7019","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:56:16.793959Z","id":"CVE-2024-53706","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-12803","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T08:15:26.007","lastModified":"2026-06-17T07:00:31.737","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila de autenticación posterior en la administración de SonicOS permite que un atacante remoto bloquee un firewall y potencialmente conduzca a la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6 Hardware","Gen7 Hardware","Gen7 NSv","TZ80"],"versions":[{"version":"6.5.4.15-117n and older versions","status":"affected"},{"version":"7.0.1-5161 and older version","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T14:55:27.671235Z","id":"CVE-2024-12803","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-12805","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T08:15:26.247","lastModified":"2026-06-17T07:00:31.893","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato posterior a la autenticación en la administración de SonicOS permite a un atacante remoto bloquear un firewall y potencialmente conducir a la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6 Hardware","Gen7 Hardware","Gen7 NSv","TZ80"],"versions":[{"version":"6.5.4.15-117n and older versions","status":"affected"},{"version":"7.0.1-5161 and older version","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T14:54:16.425901Z","id":"CVE-2024-12805","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-12806","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T08:15:26.417","lastModified":"2026-06-17T07:00:32.030","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file."},{"lang":"es","value":"Una vulnerabilidad de path traversal absoluto posterior a la autenticación en la administración de SonicOS permite a un atacante remoto leer un archivo arbitrario."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6 Hardware","Gen7 Hardware","Gen7 NSv","TZ80"],"versions":[{"version":"6.5.4.15-117n and older versions","status":"affected"},{"version":"7.0.1-5161 and older version","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T20:17:04.720308Z","id":"CVE-2024-12806","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-37"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-40765","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T08:15:26.797","lastModified":"2026-06-17T07:46:29.977","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en enteros en SonicOS a través de IPSec permite a un atacante remoto, en condiciones específicas, provocar una denegación de servicio (DoS) y potencialmente ejecutar código arbitrario mediante el envío de un payload IKEv2 especialmente manipulado."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6 NSv","Gen7 Hardware","Gen7 NSv"],"versions":[{"version":"6.5.4.4-44v-21-2395 and older versions","status":"affected"},{"version":"7.0.1-5151 and older versions","status":"affected"},{"version":"7.1.1-7051 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T14:57:15.059169Z","id":"CVE-2024-40765","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2024-12802","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-09T09:15:06.587","lastModified":"2026-06-17T07:00:31.590","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name."},{"lang":"es","value":"Bypass de MFA de SSL-VPN en SonicWALL SSL-VPN puede surgir en casos específicos debido al gestión separado de los nombres de cuenta UPN (nombre principal de usuario) y SAM (administrador de cuenta de seguridad) cuando se integra con Microsoft Active Directory, lo que permite que MFA se configure de forma independiente para cada método de inicio de sesión y potencialmente permite a los atacantes omitir MFA explotando el nombre de cuenta alternativo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen6 NSv","Gen6 Hardware","Gen7 Hardware","Gen7 NSv","TZ80"],"versions":[{"version":"6.5.4.4-44v-21-2457 and older versions","status":"affected"},{"version":"6.5.4.15-117n and older versions","status":"affected"},{"version":"7.0.1-5161 and older versions","status":"affected"},{"version":"7.1.1-7058 and older versions","status":"affected"},{"version":"7.1.2-7019","status":"affected"},{"version":"8.0.0-8035","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-21T00:00:00+00:00","id":"CVE-2024-12802","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-305"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-23006","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-23T12:15:28.523","lastModified":"2026-09-24T13:10:00.320","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de deserialización de datos no confiables antes de la autenticación en SMA1000 Appliance Management Console (AMC) y Central Management Console (CMC), que en condiciones específicas podría permitir que un atacante remoto no autenticado ejecute comandos arbitrarios del sistema operativo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-02804 (platform-hotfix) and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-23T00:00:00+00:00","id":"CVE-2025-23006","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-01-24","cisaActionDue":"2025-02-14","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"SonicWall SMA1000 Appliances Deserialization Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-502"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-02854","matchCriteriaId":"5F558E7D-E784-406B-B290-3A969DE5DB93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-02854","matchCriteriaId":"7B32A454-15AF-4D1F-9B2E-47FA49C54944"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-02854","matchCriteriaId":"03BAE67D-9500-48C3-9A57-4ACDC78ED2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-02854","matchCriteriaId":"5EB0E0F9-14CC-4B29-8026-6A4D3E73B46A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-02854","matchCriteriaId":"6C94E32E-8FE8-43C4-B86B-CC7DBD0A9973"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_ex6000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4.3-02804","matchCriteriaId":"C1E84DDC-2CDB-447D-8403-C93FE16098C5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_ex6000:-:*:*:*:*:*:*:*","matchCriteriaId":"8115B7AF-C785-4F68-9728-A19536EB363F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_ex7000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4.3-02804","matchCriteriaId":"2F33335D-F5C2-4F1C-819D-452381DC5656"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_ex7000:-:*:*:*:*:*:*:*","matchCriteriaId":"13952D02-29BB-465C-8A5C-6B25CB1BAECD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sra_ex9000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"12.4.3-02804","matchCriteriaId":"5C85D8D6-5330-4B9D-A870-5A43E49CEDB2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sra_ex9000:-:*:*:*:*:*:*:*","matchCriteriaId":"FDFDE82F-600E-48C7-AB15-ADDDFFBFC114"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-23006","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-23007","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-01-30T10:15:09.283","lastModified":"2026-06-17T08:51:22.747","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows system files, potentially leading to privilege escalation."},{"lang":"es","value":"Una vulnerabilidad en la función de exportación de registros del cliente Windows de NetExtender permite el acceso no autorizado a archivos confidenciales de Windows sistema, lo que podría conducir a una escalada de privilegios."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"10.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-20T13:45:51.017556Z","id":"CVE-2025-23007","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0005","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-23008","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-04-10T19:16:00.617","lastModified":"2026-06-17T08:51:23.253","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low privileged attacker to modify configurations."},{"lang":"es","value":" Una vulnerabilidad de gestión de privilegios inadecuada en el cliente SonicWall NetExtender para Windows (32 y 64 bits) permite que un atacante con pocos privilegios modifique las configuraciones."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"10.3.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-10T19:13:21.211046Z","id":"CVE-2025-23008","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-250"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-23009","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-04-10T19:16:00.743","lastModified":"2026-06-17T08:51:23.760","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to trigger an arbitrary file deletion."},{"lang":"es","value":" Una vulnerabilidad de escalada de privilegios locales en el cliente SonicWall NetExtender de Windows (32 y 64 bits) que permite a un atacante activar la eliminación arbitraria de un archivo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"10.3.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-17T15:57:09.040040Z","id":"CVE-2025-23009","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-250"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-23010","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-04-10T19:16:00.933","lastModified":"2026-06-17T08:51:24.400","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths."},{"lang":"es","value":"Una vulnerabilidad de resolución de enlace incorrecta antes del acceso a archivos ('Seguimiento de enlace') en el cliente Windows (32 y 64 bits) de SonicWall NetExtender que permite a un atacante manipular las rutas de archivos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"10.3.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-17T15:56:17.168941Z","id":"CVE-2025-23010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-32817","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-04-16T20:15:19.077","lastModified":"2026-06-17T09:12:37.097","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption."},{"lang":"es","value":"Vulnerabilidad de resolución de enlaces incorrecta (CWE-59) SonicWall Connect Tunnel en el cliente de Windows (32 y 64 bits) da como resultado una sobrescritura de archivos no autorizada, lo que puede derivar en una denegación de servicio o corrupción de archivos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Connect Tunnel","defaultStatus":"unknown","platforms":["Windows","64 bit","32 bit"],"versions":[{"version":"12.4.3.283 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-16T20:13:03.098353Z","id":"CVE-2025-32817","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0007","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-32818","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-04-23T20:15:43.853","lastModified":"2026-06-17T09:12:37.227","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition."},{"lang":"es","value":"Una vulnerabilidad de desreferencia de puntero nulo en SonicOS SSLVPN Virtual office interface permite que un atacante remoto no autenticado bloquee el firewall, lo que podría generar una condición de denegación de servicio (DoS)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["GEN7","GEN8"],"versions":[{"version":"7.1.1-7040","lessThanOrEqual":"7.1.3-7015","versionType":"custom","status":"affected"},{"version":"8.0.0-8037 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T19:55:23.734741Z","id":"CVE-2025-32818","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0009","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-2170","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-04-30T19:15:55.227","lastModified":"2026-06-17T09:06:27.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de Server-side request forgery (SSRF) en la interfaz SMA1000 Appliance Work Place, que en condiciones específicas podría permitir que un atacante remoto no autenticado haga que el dispositivo realice solicitudes a una ubicación no deseada."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-02907 (platform-hotfix) and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-01T13:19:54.321620Z","id":"CVE-2025-2170","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma1000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-02925","matchCriteriaId":"D8ECD016-59A2-4985-B108-BC539362C13E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma1000:-:*:*:*:*:*:*:*","matchCriteriaId":"DB78952C-B6BB-4A5A-A216-BA64AAC83D4D"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-32819","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-05-07T18:15:42.560","lastModified":"2026-06-17T09:12:37.353","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings."},{"lang":"es","value":"Una vulnerabilidad en SMA100 permite que un atacante remoto autenticado con privilegios de usuario SSLVPN evite las verificaciones de path traversal y elimine un archivo arbitrario, lo que potencialmente puede resultar en un reinicio a la configuración predeterminada de fábrica."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.14-75sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-19T03:55:11.900555Z","id":"CVE-2025-32819","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-552"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"15A5227A-A9D3-43D7-A7DD-4EEF78FE67D0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"5893E577-7C04-4762-86E9-CA4E37506C24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"F19E390C-0A2B-47C6-904A-61FF4F87246B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"BF949C0D-A260-4021-86AE-353A1EF132EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"8D834AD0-31B4-4CE3-9FE6-BFF89B18B833"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"1BD9EE38-13F3-4ABE-A071-11115CFC57F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://old.rapid7.com/blog/post/2025/05/07/multiple-vulnerabilities-in-sonicwall-sma-100-series-2025/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-32820","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-05-07T18:15:42.737","lastModified":"2026-06-17T09:12:37.500","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable."},{"lang":"es","value":"Una vulnerabilidad en SMA100 permite que un atacante remoto autenticado con privilegios de usuario SSLVPN pueda inyectar una secuencia de path traversal para hacer que cualquier directorio en el dispositivo SMA sea escribible."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.14-75sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-07T17:29:05.535867Z","id":"CVE-2025-32820","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"15A5227A-A9D3-43D7-A7DD-4EEF78FE67D0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"5893E577-7C04-4762-86E9-CA4E37506C24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"F19E390C-0A2B-47C6-904A-61FF4F87246B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"BF949C0D-A260-4021-86AE-353A1EF132EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"8D834AD0-31B4-4CE3-9FE6-BFF89B18B833"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"1BD9EE38-13F3-4ABE-A071-11115CFC57F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-32821","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-05-07T18:15:42.853","lastModified":"2026-06-17T09:12:37.650","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance."},{"lang":"es","value":"Una vulnerabilidad en SMA100 permite que un atacante remoto autenticado con privilegios de administrador SSLVPN pueda inyectar argumentos de comando de shell para cargar un archivo en el dispositivo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.14-75sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-08T03:56:17.963567Z","id":"CVE-2025-32821","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"15A5227A-A9D3-43D7-A7DD-4EEF78FE67D0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*","matchCriteriaId":"7B164EB6-4CA0-46EF-986D-270968E87C5C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"5893E577-7C04-4762-86E9-CA4E37506C24"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"F19E390C-0A2B-47C6-904A-61FF4F87246B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"BF949C0D-A260-4021-86AE-353A1EF132EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"8D834AD0-31B4-4CE3-9FE6-BFF89B18B833"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.15-81sv","matchCriteriaId":"1BD9EE38-13F3-4ABE-A071-11115CFC57F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40595","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-05-14T17:15:48.877","lastModified":"2026-06-17T09:21:48.287","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de Server-side request forgery (SSRF) en la interfaz de SMA1000 Appliance Work Place. Al usar una URL codificada, un atacante remoto no autenticado podría provocar que el dispositivo realice solicitudes a una ubicación no deseada."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-02925 (platform-hotfix) and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-14T19:01:10.492194Z","id":"CVE-2025-40595","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0010","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2025-40599","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-07-23T14:15:33.090","lastModified":"2026-06-17T09:21:48.840","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution."},{"lang":"es","value":"Existe una vulnerabilidad de carga arbitraria de archivos autenticados en la interfaz de administración web de la serie SMA 100. Un atacante remoto con privilegios administrativos puede explotar esta vulnerabilidad para cargar archivos arbitrarios al sistema, lo que podría provocar la ejecución remota de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA 100 Series","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.15-81sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-24T00:00:00+00:00","id":"CVE-2025-40599","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"786BB26D-B943-4564-B8CC-3260EF2AACED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"057D8219-D4F0-49FB-8EE4-6BBBDAED49DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"3418E737-CB38-4736-9725-AD05A1AB29CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40596","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-07-23T15:15:32.140","lastModified":"2026-06-17T09:21:48.423","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila en la interfaz web de la serie SMA100 permite que un atacante remoto no autenticado provoque una denegación de servicio (DoS) o potencialmente resulte en la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA 100 Series","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.15-81sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-25T03:55:20.889053Z","id":"CVE-2025-40596","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"3418E737-CB38-4736-9725-AD05A1AB29CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"786BB26D-B943-4564-B8CC-3260EF2AACED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"057D8219-D4F0-49FB-8EE4-6BBBDAED49DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40597","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-07-23T15:15:32.320","lastModified":"2026-06-17T09:21:48.560","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en montón en la interfaz web de la serie SMA100 permite que un atacante remoto no autenticado provoque una denegación de servicio (DoS) o potencialmente resulte en la ejecución de código."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA 100 Series","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.15-81sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-25T03:55:22.115090Z","id":"CVE-2025-40597","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"3418E737-CB38-4736-9725-AD05A1AB29CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"786BB26D-B943-4564-B8CC-3260EF2AACED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"057D8219-D4F0-49FB-8EE4-6BBBDAED49DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40598","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-07-23T15:15:32.490","lastModified":"2026-06-17T09:21:48.697","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code."},{"lang":"es","value":"Existe una vulnerabilidad de cross-site scripting (XSS) reflejado en la interfaz web de la serie SMA100, que permite que un atacante remoto no autenticado potencialmente ejecute código JavaScript arbitrario."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA 100 Series","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.1.15-81sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-29T13:23:53.835568Z","id":"CVE-2025-40598","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"3418E737-CB38-4736-9725-AD05A1AB29CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"786BB26D-B943-4564-B8CC-3260EF2AACED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.1-90sv","matchCriteriaId":"057D8219-D4F0-49FB-8EE4-6BBBDAED49DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://labs.watchtowr.com/stack-overflows-heap-overflows-and-existential-dread-sonicwall-sma100-cve-2025-40596-cve-2025-40597-and-cve-2025-40598/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-40600","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-07-29T22:15:24.927","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption."},{"lang":"es","value":"La vulnerabilidad del uso de una cadena de formato controlada externamente en la interfaz SonicOS SSL VPN permite que un atacante remoto no autenticado provoque la interrupción del servicio."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Linux"],"versions":[{"version":"7.2.0-7015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-30T13:32:27.290793Z","id":"CVE-2025-40600","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndExcluding":"7.3.0-7012","matchCriteriaId":"612519F2-E1D6-49F3-8920-6431ADC4ED84"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0013","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40603","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-10-31T11:15:34.757","lastModified":"2026-10-07T21:10:00.200","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data."},{"lang":"es","value":"Una posible exposición de información sensible en archivos de registro en dispositivos SonicWall SMA100 Series podría permitir a un administrador remoto y autenticado, bajo ciertas condiciones, ver datos parciales de credenciales de usuarios."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA100","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.2.2.2-92sv and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-31T18:53:31.784947Z","id":"CVE-2025-40603","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.3","matchCriteriaId":"3CED8FE0-D00D-4919-968F-A7F4FDD8C812"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.3","matchCriteriaId":"C395F5EF-2A49-4D59-9DF4-69F3CC364595"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma_500v_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.2.3","matchCriteriaId":"6FAB4D54-F7B6-422F-9D4F-A78A982A249E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*","matchCriteriaId":"A6AD8A33-7CE4-4C66-9E23-F0C9C9638770"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0017","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40601","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-11-20T15:17:28.570","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila en el servicio SonicOS SSLVPN permite a un atacante remoto no autenticado causar denegación de servicio (DoS), lo que podría provocar que un cortafuegos afectado se bloquee."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"7.3.0-7012 and older versions","status":"affected"},{"version":"8.0.2-8011 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-20T18:30:57.354762Z","id":"CVE-2025-40601","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndExcluding":"7.3.1-7013","matchCriteriaId":"3D8575AA-96A1-4DAD-9098-B3BF9472B40C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.0.3-8011","matchCriteriaId":"B60197D0-41B7-46DB-B33E-FEE1F1037A8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0016","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40604","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-11-20T15:17:28.750","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution."},{"lang":"es","value":"Vulnerabilidad de descarga de código sin verificación de integridad en el dispositivo SonicWall Email Security carga imágenes del sistema de archivos raíz sin verificar firmas, permitiendo a atacantes con acceso a VMDK o al almacén de datos modificar archivos del sistema y obtener ejecución de código arbitrario persistente."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux","Windows"],"versions":[{"version":"10.0.33.8195 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-21T05:02:06.793237Z","id":"CVE-2025-40604","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"7A1B8BFC-9721-491D-B803-1571D0702596"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"BA9126B7-5C64-4692-954C-6EF71261862C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"8E47DFE3-0731-4E63-99B4-14EBE778BB92"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*","matchCriteriaId":"271F06DD-8DAA-46EF-A803-659EA253CC63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"24C2A297-95A8-48ED-BACC-81E8B7E85681"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"A114E829-5FC6-4321-8D28-C63EC09F9099"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"5CD71CC1-27B3-4782-85A7-6D6F17C20A5E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*","matchCriteriaId":"443B635B-6B08-479B-A635-26724B192BF0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"C95DDA2E-E2DC-4F98-9901-0A10E7D0A168"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*","matchCriteriaId":"C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40605","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-11-20T15:17:28.917","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta ha sido identificada en el dispositivo de seguridad de correo electrónico que permite a un atacante manipular rutas del sistema de archivos inyectando secuencias de salto de directorio manipuladas (como ../) y puede acceder a archivos y directorios fuera de la ruta restringida prevista."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux","Windows"],"versions":[{"version":"10.0.33.8195 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-20T18:29:26.973240Z","id":"CVE-2025-40605","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"7A1B8BFC-9721-491D-B803-1571D0702596"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"BA9126B7-5C64-4692-954C-6EF71261862C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"8E47DFE3-0731-4E63-99B4-14EBE778BB92"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*","matchCriteriaId":"271F06DD-8DAA-46EF-A803-659EA253CC63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"24C2A297-95A8-48ED-BACC-81E8B7E85681"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"A114E829-5FC6-4321-8D28-C63EC09F9099"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"5CD71CC1-27B3-4782-85A7-6D6F17C20A5E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*","matchCriteriaId":"443B635B-6B08-479B-A635-26724B192BF0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.33.8195","matchCriteriaId":"C95DDA2E-E2DC-4F98-9901-0A10E7D0A168"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*","matchCriteriaId":"C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0018","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-40602","sourceIdentifier":"PSIRT@sonicwall.com","published":"2025-12-18T11:15:46.760","lastModified":"2026-06-17T09:21:49.277","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03093 (platform-hotfix) and earlier versions","status":"affected"},{"version":"12.5.0-02002 (platform-hotfix) and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-18T11:31:20.912803Z","id":"CVE-2025-40602","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-12-17","cisaActionDue":"2025-12-24","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable","cisaVulnerabilityName":"SonicWall SMA1000 Missing Authorization Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-250"},{"lang":"en","value":"CWE-862"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03245","matchCriteriaId":"FA502098-85D4-4263-A972-5C257A27E566"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02283","matchCriteriaId":"A8117AD1-538B-4D74-B7BD-CDDFDF1CA5D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03245","matchCriteriaId":"11F3325C-B52F-4569-A900-87A3062BA955"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02283","matchCriteriaId":"83F28647-1EB1-4BD4-806E-ECFA82C7F81F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03245","matchCriteriaId":"634F6A69-541B-4C08-80CC-D75BCA1AFA0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02283","matchCriteriaId":"557266E9-9045-4686-B260-ADCCE884E47B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03245","matchCriteriaId":"A4BD7021-91E8-4E68-AC7B-6C971E6C6F77"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02283","matchCriteriaId":"3FBEAD8B-7C9F-445C-BDC4-E2D19291D155"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03245","matchCriteriaId":"A68FFD03-F144-4F74-A7FC-700AC5CA789D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02283","matchCriteriaId":"42CE52E0-1CD5-4CA2-85CB-D5BDB2FE63D8"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-40602","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-0399","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-02-24T15:21:36.980","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint."},{"lang":"es","value":"Múltiples vulnerabilidades de desbordamiento de búfer basado en pila post-autenticación en la interfaz de gestión de SonicOS debido a una comprobación de límites inadecuada en un endpoint de API."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen7","Gen8"],"versions":[{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-24T15:50:04.806000Z","id":"CVE-2026-0399","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"C263643A-0274-47CF-881F-59CEF6B8A20A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-0400","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-02-24T15:21:37.127","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall."},{"lang":"es","value":"Una vulnerabilidad de Format String post-autenticación en SonicOS permite a un atacante remoto colapsar un cortafuegos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen7","Gen8"],"versions":[{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-24T15:34:54.196554Z","id":"CVE-2026-0400","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"C263643A-0274-47CF-881F-59CEF6B8A20A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-0401","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-02-24T15:21:37.267","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall."},{"lang":"es","value":"Una vulnerabilidad de desreferencia de puntero nulo post-autenticación en SonicOS permite a un atacante remoto bloquear un cortafuegos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen7","Gen8"],"versions":[{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-24T15:34:13.198810Z","id":"CVE-2026-0401","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"C263643A-0274-47CF-881F-59CEF6B8A20A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-0402","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-02-24T15:21:37.410","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall."},{"lang":"es","value":"Una vulnerabilidad de lectura fuera de límites post-autenticación en SonicOS permite a un atacante remoto colapsar un cortafuegos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen7","Gen8"],"versions":[{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-24T15:33:47.902153Z","id":"CVE-2026-0402","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"C263643A-0274-47CF-881F-59CEF6B8A20A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-3439","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-03-04T10:16:08.150","lastModified":"2026-11-09T14:48:14.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila post-autenticación en el manejo de certificados de SonicOS permite a un atacante remoto colapsar un cortafuegos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen7","Gen8"],"versions":[{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-04T16:05:44.553615Z","id":"CVE-2026-3439","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"C263643A-0274-47CF-881F-59CEF6B8A20A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"C86EC812-9A1A-48A5-B47C-E65B9F49BEE3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0001","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-3468","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-03-31T21:16:32.950","lastModified":"2026-07-24T20:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code."},{"lang":"es","value":"Una vulnerabilidad de cross-site scripting (XSS) almacenada ha sido identificada en el dispositivo SonicWall Email Security debido a la neutralización inadecuada de la entrada proporcionada por el usuario durante la generación de páginas web, permitiendo a un atacante remoto autenticado como usuario administrador ejecutar potencialmente código JavaScript arbitrario."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux","Windows"],"versions":[{"version":"10.0.34.8215 and earlier versions","status":"affected"},{"version":"10.0.34.8223 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-31T20:35:08.592056Z","id":"CVE-2026-3468","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.35.8405","matchCriteriaId":"AD63C704-413C-43B7-9475-A19411E3BF6B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa5000:-:*:*:*:*:*:*:*","matchCriteriaId":"91ED89A0-CFFB-44D3-8DE8-64E8DB635872"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa5050:-:*:*:*:*:*:*:*","matchCriteriaId":"69CD3296-0424-46C7-82F1-3BE7892B72C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa7000:-:*:*:*:*:*:*:*","matchCriteriaId":"3FE6D8AA-F614-404A-9006-A94763AA23B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa7050:-:*:*:*:*:*:*:*","matchCriteriaId":"F748C59C-740B-4F52-9E0D-70F7D4E9AA07"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa9000:-:*:*:*:*:*:*:*","matchCriteriaId":"7D46ECFF-FA41-4861-A047-1EEFD89D13DD"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-3469","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-03-31T21:16:33.163","lastModified":"2026-07-24T20:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive."},{"lang":"es","value":"Existe una vulnerabilidad de denegación de servicio (DoS) debido a una validación de entrada incorrecta en el dispositivo SonicWall Email Security, lo que permite a un atacante remoto autenticado como usuario administrador hacer que la aplicación deje de responder."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux","Windows"],"versions":[{"version":"10.0.34.8215 and earlier versions","status":"affected"},{"version":"10.0.34.8223 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-31T20:34:36.717764Z","id":"CVE-2026-3469","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.35.8405","matchCriteriaId":"AD63C704-413C-43B7-9475-A19411E3BF6B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa5000:-:*:*:*:*:*:*:*","matchCriteriaId":"91ED89A0-CFFB-44D3-8DE8-64E8DB635872"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa5050:-:*:*:*:*:*:*:*","matchCriteriaId":"69CD3296-0424-46C7-82F1-3BE7892B72C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa7000:-:*:*:*:*:*:*:*","matchCriteriaId":"3FE6D8AA-F614-404A-9006-A94763AA23B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa7050:-:*:*:*:*:*:*:*","matchCriteriaId":"F748C59C-740B-4F52-9E0D-70F7D4E9AA07"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa9000:-:*:*:*:*:*:*:*","matchCriteriaId":"7D46ECFF-FA41-4861-A047-1EEFD89D13DD"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-3470","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-03-31T21:16:33.363","lastModified":"2026-07-24T20:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database."},{"lang":"es","value":"Una vulnerabilidad existe en el dispositivo SonicWall Email Security debido a una sanitización de entrada incorrecta que puede llevar a la corrupción de datos, permitiendo que un atacante remoto autenticado como usuario administrador podría explotar este problema al proporcionar una entrada manipulada que corrompe la base de datos de la aplicación."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux","Windows"],"versions":[{"version":"10.0.34.8215 and earlier versions","status":"affected"},{"version":"10.0.34.8223 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","baseScore":3.8,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-31T20:34:11.598748Z","id":"CVE-2026-3470","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.35.8405","matchCriteriaId":"AD63C704-413C-43B7-9475-A19411E3BF6B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa5000:-:*:*:*:*:*:*:*","matchCriteriaId":"91ED89A0-CFFB-44D3-8DE8-64E8DB635872"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa5050:-:*:*:*:*:*:*:*","matchCriteriaId":"69CD3296-0424-46C7-82F1-3BE7892B72C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa7000:-:*:*:*:*:*:*:*","matchCriteriaId":"3FE6D8AA-F614-404A-9006-A94763AA23B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa7050:-:*:*:*:*:*:*:*","matchCriteriaId":"F748C59C-740B-4F52-9E0D-70F7D4E9AA07"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:esa9000:-:*:*:*:*:*:*:*","matchCriteriaId":"7D46ECFF-FA41-4861-A047-1EEFD89D13DD"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-4112","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-09T15:16:13.517","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator."},{"lang":"es","value":"Neutralización incorrecta de elementos especiales utilizados en un comando SQL (’inyección SQL’) en dispositivos SonicWall de la serie SMA1000 permite a un atacante remoto autenticado con privilegios de administrador de solo lectura escalar privilegios a administrador principal."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03245 (platform-hotfix) and earlier versions.","status":"affected"},{"version":"12.5.0-02283 (platform-hotfix) and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-10T03:56:04.484507Z","id":"CVE-2026-4112","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"4DBCAA68-BFC4-4282-BE32-5BE837C01D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"9A037764-3A32-4BDA-9A30-5B37C18CD08D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"987A8BE1-77A9-4672-933B-ACD501DD3AB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"87A919DB-A894-4ED9-8934-C7C007AACF68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"6C562F03-50C0-4ED7-8AD6-4CF3C5862D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"BFF37E70-755D-425E-84C6-DDB975288187"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"3616EEFA-CEB8-4E9C-A53C-356C78DC1244"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"0FE09110-AA3D-4466-8C32-2480D1135AF7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"E9C76A87-8E12-493D-8F14-D73D83DF641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"48715079-B463-4626-971E-203EB3EDDAAB"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-4113","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-09T15:16:13.683","lastModified":"2026-10-26T00:10:00.150","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials."},{"lang":"es","value":"Una vulnerabilidad de discrepancia de respuesta observable en los dispositivos de la serie SonicWall SMA1000 permite a un atacante remoto enumerar las credenciales de usuario de SSL VPN."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03245 (platform-hotfix) and earlier versions.","status":"affected"},{"version":"12.5.0-02283 (platform-hotfix) and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-13T18:27:00.386461Z","id":"CVE-2026-4113","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-204"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"4DBCAA68-BFC4-4282-BE32-5BE837C01D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"9A037764-3A32-4BDA-9A30-5B37C18CD08D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"E9C76A87-8E12-493D-8F14-D73D83DF641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"48715079-B463-4626-971E-203EB3EDDAAB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"6C562F03-50C0-4ED7-8AD6-4CF3C5862D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"BFF37E70-755D-425E-84C6-DDB975288187"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"3616EEFA-CEB8-4E9C-A53C-356C78DC1244"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"0FE09110-AA3D-4466-8C32-2480D1135AF7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"987A8BE1-77A9-4672-933B-ACD501DD3AB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"87A919DB-A894-4ED9-8934-C7C007AACF68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-4114","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-09T15:16:13.817","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication."},{"lang":"es","value":"Manejo inadecuado de la codificación Unicode en los dispositivos de la serie SonicWall SMA1000 permite a un administrador SSLVPN remoto autenticado eludir la autenticación TOTP de AMC."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03245 (platform-hotfix) and earlier versions.","status":"affected"},{"version":"12.5.0-02283 (platform-hotfix) and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-10T03:56:06.306670Z","id":"CVE-2026-4114","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-176"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"4DBCAA68-BFC4-4282-BE32-5BE837C01D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"9A037764-3A32-4BDA-9A30-5B37C18CD08D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"987A8BE1-77A9-4672-933B-ACD501DD3AB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"87A919DB-A894-4ED9-8934-C7C007AACF68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"6C562F03-50C0-4ED7-8AD6-4CF3C5862D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"BFF37E70-755D-425E-84C6-DDB975288187"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"3616EEFA-CEB8-4E9C-A53C-356C78DC1244"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"0FE09110-AA3D-4466-8C32-2480D1135AF7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"E9C76A87-8E12-493D-8F14-D73D83DF641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"48715079-B463-4626-971E-203EB3EDDAAB"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-4116","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-09T15:16:14.010","lastModified":"2026-10-26T00:10:00.150","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication."},{"lang":"es","value":"Manejo inadecuado de la codificación Unicode en los dispositivos de la serie SonicWall SMA1000 permite a un usuario SSLVPN remoto autenticado eludir la autenticación TOTP de Workplace/Connect Tunnel."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03245 (platform-hotfix) and earlier versions.","status":"affected"},{"version":"12.5.0-02283 (platform-hotfix) and earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-13T18:26:14.491064Z","id":"CVE-2026-4116","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-176"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"4DBCAA68-BFC4-4282-BE32-5BE837C01D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"9A037764-3A32-4BDA-9A30-5B37C18CD08D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"987A8BE1-77A9-4672-933B-ACD501DD3AB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"87A919DB-A894-4ED9-8934-C7C007AACF68"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6200:-:*:*:*:*:*:*:*","matchCriteriaId":"57B3C90F-F633-41B9-855E-902F6DC8ACA5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"6C562F03-50C0-4ED7-8AD6-4CF3C5862D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7200_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"BFF37E70-755D-425E-84C6-DDB975288187"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7200:-:*:*:*:*:*:*:*","matchCriteriaId":"4F7B4ED9-7A57-48DC-AAEC-A2C2EAFF3B64"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"3616EEFA-CEB8-4E9C-A53C-356C78DC1244"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"0FE09110-AA3D-4466-8C32-2480D1135AF7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03387","matchCriteriaId":"E9C76A87-8E12-493D-8F14-D73D83DF641E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02624","matchCriteriaId":"48715079-B463-4626-971E-203EB3EDDAAB"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0003","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-0204","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-29T17:16:40.307","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions."},{"lang":"es","value":"Una vulnerabilidad en el mecanismo de control de acceso de SonicOS puede permitir que ciertas funciones de la interfaz de gestión sean accesibles bajo condiciones específicas."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen6","Gen7","Gen8"],"versions":[{"version":"6.5.5.1-6n and older versions","status":"affected"},{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-29T00:00:00+00:00","id":"CVE-2026-0204","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"},{"lang":"en","value":"CWE-1390"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.5.2-28n","matchCriteriaId":"AECA7D87-803A-44ED-AD56-D609317D603A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350w:-:*:*:*:*:*:*:*","matchCriteriaId":"FF991212-3F2C-4F54-B96C-C33F500DB77B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndIncluding":"7.0.1-5169","matchCriteriaId":"DE5C7BF2-73A5-47F9-BAE5-903DDC73C5A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"E7E993C8-637F-423C-AD48-4627E2D53238"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0-8035","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"A7B4459A-2B44-4C93-8EB5-E1FFAB7FAE8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280w:-:*:*:*:*:*:*:*","matchCriteriaId":"4B1618BE-A465-4E2F-BB7F-79E0AA930B1C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380w:-:*:*:*:*:*:*:*","matchCriteriaId":"72D94F4D-CEC8-473B-A49C-466F6F7274D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-0205","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-29T17:16:40.480","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta post-autenticación en SonicOS permite a un atacante interactuar con servicios normalmente restringidos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen6","Gen7","Gen8"],"versions":[{"version":"6.5.5.1-6n and older versions","status":"affected"},{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-29T16:59:18.475980Z","id":"CVE-2026-0205","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-35"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.5.2-28n","matchCriteriaId":"AECA7D87-803A-44ED-AD56-D609317D603A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350w:-:*:*:*:*:*:*:*","matchCriteriaId":"FF991212-3F2C-4F54-B96C-C33F500DB77B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndIncluding":"7.0.1-5169","matchCriteriaId":"DE5C7BF2-73A5-47F9-BAE5-903DDC73C5A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"E7E993C8-637F-423C-AD48-4627E2D53238"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0-8035","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"A7B4459A-2B44-4C93-8EB5-E1FFAB7FAE8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280w:-:*:*:*:*:*:*:*","matchCriteriaId":"4B1618BE-A465-4E2F-BB7F-79E0AA930B1C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380w:-:*:*:*:*:*:*:*","matchCriteriaId":"72D94F4D-CEC8-473B-A49C-466F6F7274D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-0206","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-04-29T17:16:40.633","lastModified":"2026-11-09T14:43:41.437","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila post-autenticación en SonicOS permite a un atacante remoto bloquear un cortafuegos."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux","Gen6","Gen7","Gen8"],"versions":[{"version":"6.5.5.1-6n and older versions","status":"affected"},{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.1-7013 and older versions","status":"affected"},{"version":"8.1.0-8017 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-29T17:00:27.554889Z","id":"CVE-2026-0206","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5.5.2-28n","matchCriteriaId":"AECA7D87-803A-44ED-AD56-D609317D603A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2650:-:*:*:*:*:*:*:*","matchCriteriaId":"B7BCDFEE-DC5A-44B8-85DF-8BFC02B1A973"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3600:-:*:*:*:*:*:*:*","matchCriteriaId":"8A24BCC0-CE41-49AF-B03D-D4FCB422503B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3650:-:*:*:*:*:*:*:*","matchCriteriaId":"043858A6-26AC-4EB0-A240-A43AD08C6AD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4600:-:*:*:*:*:*:*:*","matchCriteriaId":"8FD73880-DC60-467F-99B6-69807D58A840"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4650:-:*:*:*:*:*:*:*","matchCriteriaId":"73BB9452-A014-4A68-9662-63E6C60EEAD2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5600:-:*:*:*:*:*:*:*","matchCriteriaId":"B0CF683A-7E83-464B-8A0D-4CC641377FA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5650:-:*:*:*:*:*:*:*","matchCriteriaId":"9FAAEBB4-F180-4195-BA7F-591AB02EEDC9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6600:-:*:*:*:*:*:*:*","matchCriteriaId":"CD9C3F77-2F1A-4C4F-A8F8-CDBFB7B87891"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6650:-:*:*:*:*:*:*:*","matchCriteriaId":"676B05B2-716E-4DC4-BEE8-0E3BCCA5DB27"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9200:-:*:*:*:*:*:*:*","matchCriteriaId":"FEF2B435-957C-4BBE-937D-23E4F33189EF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9250:-:*:*:*:*:*:*:*","matchCriteriaId":"0CE4FE75-10AD-47D4-AF87-E4C294F89EA8"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9400:-:*:*:*:*:*:*:*","matchCriteriaId":"B485C543-DFCF-4481-92B4-F7198EE4FBD1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9450:-:*:*:*:*:*:*:*","matchCriteriaId":"928C1C0D-7AF7-4076-B5B2-207DFF3AD6A4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9600:-:*:*:*:*:*:*:*","matchCriteriaId":"F030C5AB-36CA-445E-AC87-8DEE18DBB40E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sm_9650:-:*:*:*:*:*:*:*","matchCriteriaId":"A1F9D940-8AE2-4B92-B69D-9FF6F48DF16C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250:-:*:*:*:*:*:*:*","matchCriteriaId":"9FDE64E9-44DD-4B7C-BA34-FE2C79E3FAED"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho_250w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E8F3935-89B4-4091-9B8C-442C02FD4F3A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sohow:-:*:*:*:*:*:*:*","matchCriteriaId":"7268E89B-FF46-45AD-82FF-333505EF957B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300:-:*:*:*:*:*:*:*","matchCriteriaId":"0804FADE-57F7-452F-86B3-079701059D37"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300p:-:*:*:*:*:*:*:*","matchCriteriaId":"9956F726-6D62-4616-B60A-4D3DD6F32105"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_300w:-:*:*:*:*:*:*:*","matchCriteriaId":"29F4D403-F20A-4802-AAE9-9582486EB436"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350:-:*:*:*:*:*:*:*","matchCriteriaId":"675F28A7-0BB3-4CDA-855E-7EFC650B512E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_350w:-:*:*:*:*:*:*:*","matchCriteriaId":"FF991212-3F2C-4F54-B96C-C33F500DB77B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400:-:*:*:*:*:*:*:*","matchCriteriaId":"5983C650-84F6-4B2E-A27E-9E83EA1DDC02"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_400w:-:*:*:*:*:*:*:*","matchCriteriaId":"BDD4B412-7967-477F-929E-8F12A39186FF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500:-:*:*:*:*:*:*:*","matchCriteriaId":"A1D996FA-52D1-47C2-87E6-682EEC9CA532"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_500w:-:*:*:*:*:*:*:*","matchCriteriaId":"B9DEF6EE-000D-407D-AA2B-E039BA306A2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600:-:*:*:*:*:*:*:*","matchCriteriaId":"C0B8BFA4-2E15-4318-B7A9-DBDE801D0CF0"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz_600p:-:*:*:*:*:*:*:*","matchCriteriaId":"DCB8CDE6-8052-40F7-950F-05329499A58A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0.0","versionEndIncluding":"7.0.1-5169","matchCriteriaId":"DE5C7BF2-73A5-47F9-BAE5-903DDC73C5A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.1-7040","versionEndExcluding":"7.3.2-7010","matchCriteriaId":"E7E993C8-637F-423C-AD48-4627E2D53238"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0-8035","versionEndExcluding":"8.2.0-8009","matchCriteriaId":"A7B4459A-2B44-4C93-8EB5-E1FFAB7FAE8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280w:-:*:*:*:*:*:*:*","matchCriteriaId":"4B1618BE-A465-4E2F-BB7F-79E0AA930B1C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380w:-:*:*:*:*:*:*:*","matchCriteriaId":"72D94F4D-CEC8-473B-A49C-466F6F7274D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-15409","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-07-14T20:16:56.783","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) ha sido identificada en la interfaz WorkPlace del dispositivo SMA1000. Un atacante remoto no autenticado podría potencialmente causar que el dispositivo realice peticiones a una ubicación no deseada."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03245","lessThanOrEqual":"12.4.3-03434","versionType":"custom","status":"affected"},{"version":"12.5.0-02283","lessThanOrEqual":"12.5.0-02800","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T00:00:00+00:00","id":"CVE-2026-15409","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-07-14","cisaActionDue":"2026-07-17","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03245:*:*:*:*:*:*:*","matchCriteriaId":"7F861049-5B88-4E18-A0E7-D1E2BC7A4342"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03387:*:*:*:*:*:*:*","matchCriteriaId":"E4A6CA48-E2D9-4F18-8FC8-B1EE7F51789C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03434:*:*:*:*:*:*:*","matchCriteriaId":"EBCE7761-8416-4942-B0BD-426EFC73B57C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02283:*:*:*:*:*:*:*","matchCriteriaId":"CE23BD37-4112-407F-9E34-04CB5A4DA996"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02624:*:*:*:*:*:*:*","matchCriteriaId":"95E3313E-0647-40ED-9848-5AC01188A84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02800:*:*:*:*:*:*:*","matchCriteriaId":"75F6B9CE-73E4-42BE-9CE1-FD79255CDD0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03245:*:*:*:*:*:*:*","matchCriteriaId":"55CD7766-9F2D-450D-A878-AA1522E8FF68"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03387:*:*:*:*:*:*:*","matchCriteriaId":"EAF12D10-FA8F-471E-B008-68E0E29089C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03434:*:*:*:*:*:*:*","matchCriteriaId":"79920402-165D-4D81-BFD2-9F679A48671A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02283:*:*:*:*:*:*:*","matchCriteriaId":"6842E4D7-BEDA-41FB-AEC3-CEB3692374C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02624:*:*:*:*:*:*:*","matchCriteriaId":"6AF4557F-ABAF-4795-915A-695383F64EEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02800:*:*:*:*:*:*:*","matchCriteriaId":"9459507A-A2C8-400D-8669-E8ADBDE61DE0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.4.3-03245:*:*:*:*:*:*:*","matchCriteriaId":"571C9CA1-F660-4479-9E91-B3B1714A2090"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.4.3-03387:*:*:*:*:*:*:*","matchCriteriaId":"58706C99-B77F-4AE5-BD45-EBA65DEE2485"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.4.3-03434:*:*:*:*:*:*:*","matchCriteriaId":"9E698DFA-1684-43E3-9964-0E207A7A2CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.5.0-02283:*:*:*:*:*:*:*","matchCriteriaId":"F2F44543-2404-4CDF-9D2F-1B851660F5D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.5.0-02624:*:*:*:*:*:*:*","matchCriteriaId":"1E14F40F-4AA1-42B4-998E-AC965FBBE519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.5.0-02800:*:*:*:*:*:*:*","matchCriteriaId":"43197E99-0500-4971-8A66-4E70F8138289"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*","matchCriteriaId":"653B5F4D-7417-4A85-B385-46157A1540A6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15409","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-15410","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-07-14T20:16:56.903","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands."},{"lang":"es","value":"Se ha identificado una vulnerabilidad de control inadecuado de la generación de código (’Inyección de Código’) post-autenticación en la Consola de Gestión de Dispositivos SMA1000 (AMC) que en condiciones específicas podría potencialmente permitir a un atacante remoto autenticado como administrador ejecutar comandos arbitrarios del sistema operativo."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03245","lessThanOrEqual":"12.4.3-03434","versionType":"custom","status":"affected"},{"version":"12.5.0-02283","lessThanOrEqual":"12.5.0-02800","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T00:00:00+00:00","id":"CVE-2026-15410","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-07-14","cisaActionDue":"2026-07-17","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"SonicWall SMA1000 Appliances Code Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03245:*:*:*:*:*:*:*","matchCriteriaId":"7F861049-5B88-4E18-A0E7-D1E2BC7A4342"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03387:*:*:*:*:*:*:*","matchCriteriaId":"E4A6CA48-E2D9-4F18-8FC8-B1EE7F51789C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03434:*:*:*:*:*:*:*","matchCriteriaId":"EBCE7761-8416-4942-B0BD-426EFC73B57C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02283:*:*:*:*:*:*:*","matchCriteriaId":"CE23BD37-4112-407F-9E34-04CB5A4DA996"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02624:*:*:*:*:*:*:*","matchCriteriaId":"95E3313E-0647-40ED-9848-5AC01188A84F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02800:*:*:*:*:*:*:*","matchCriteriaId":"75F6B9CE-73E4-42BE-9CE1-FD79255CDD0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03245:*:*:*:*:*:*:*","matchCriteriaId":"55CD7766-9F2D-450D-A878-AA1522E8FF68"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03387:*:*:*:*:*:*:*","matchCriteriaId":"EAF12D10-FA8F-471E-B008-68E0E29089C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03434:*:*:*:*:*:*:*","matchCriteriaId":"79920402-165D-4D81-BFD2-9F679A48671A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02283:*:*:*:*:*:*:*","matchCriteriaId":"6842E4D7-BEDA-41FB-AEC3-CEB3692374C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02624:*:*:*:*:*:*:*","matchCriteriaId":"6AF4557F-ABAF-4795-915A-695383F64EEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02800:*:*:*:*:*:*:*","matchCriteriaId":"9459507A-A2C8-400D-8669-E8ADBDE61DE0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.4.3-03245:*:*:*:*:*:*:*","matchCriteriaId":"571C9CA1-F660-4479-9E91-B3B1714A2090"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.4.3-03387:*:*:*:*:*:*:*","matchCriteriaId":"58706C99-B77F-4AE5-BD45-EBA65DEE2485"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.4.3-03434:*:*:*:*:*:*:*","matchCriteriaId":"9E698DFA-1684-43E3-9964-0E207A7A2CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.5.0-02283:*:*:*:*:*:*:*","matchCriteriaId":"F2F44543-2404-4CDF-9D2F-1B851660F5D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.5.0-02624:*:*:*:*:*:*:*","matchCriteriaId":"1E14F40F-4AA1-42B4-998E-AC965FBBE519"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:12.5.0-02800:*:*:*:*:*:*:*","matchCriteriaId":"43197E99-0500-4971-8A66-4E70F8138289"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*","matchCriteriaId":"653B5F4D-7417-4A85-B385-46157A1540A6"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15410","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-0516","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-05T13:20:33.670","lastModified":"2026-10-23T21:10:00.157","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de Encabezados HTTP para Sintaxis de Scripting en SonicOS podría permitir a un atacante remoto manipular el encabezado Host y redirigir a los usuarios de gestión del cortafuegos a dominios web arbitrarios."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"6.5.5.2-28n and older versions","status":"affected"},{"version":"7.0.1-5169 and older versions","status":"affected"},{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.1-8010 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-05T19:30:25.010309Z","id":"CVE-2026-0516","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-644"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0009","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66151","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-07T20:16:52.750","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash."},{"lang":"es","value":"SonicWall Global VPN Client versión 4.10.8.1108 y anteriores es vulnerable a una lectura de memoria del kernel fuera de límites en el controlador SWIPsec.sys, lo que podría permitir a un atacante local provocar una caída del sistema."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Global VPN Client","defaultStatus":"unknown","platforms":["Windows"],"versions":[{"version":"4.10.8.1108 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-11T19:29:26.927956Z","id":"CVE-2026-66151","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0010","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66145","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T20:18:37.717","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip."},{"lang":"es","value":"Una vulnerabilidad de ejecución remota de código no autenticada fue identificada en GMS 9.5.1 (Build 9510.1044) y versiones anteriores que permite a un atacante remoto leer datos sensibles y realizar escritura arbitraria de archivos a través de zipslip."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","platforms":["Windows","Linux"],"versions":[{"version":"9.5.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T04:00:44.874926Z","id":"CVE-2026-66145","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66146","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T20:18:37.837","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser."},{"lang":"es","value":"Múltiples vulnerabilidades de cross-site scripting (XSS) fueron identificadas en GMS 9.5.1 (Build 9510.1044) y versiones anteriores que permiten a un atacante remoto ejecutar script de javascript en el navegador de un usuario."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","platforms":["Windows","Linux"],"versions":[{"version":"9.5.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-11T20:13:11.134840Z","id":"CVE-2026-66146","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-18634","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T21:17:30.880","lastModified":"2026-10-23T20:10:00.160","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affected component."},{"lang":"es","value":"Se encontró una vulnerabilidad de manejo inseguro de objetos serializados en uno de los servicios de la aplicación GMS 9.5.1 (Build 9510.1044) y versiones anteriores. Un atacante local con la capacidad de interactuar con el servicio podría explotar este comportamiento para realizar acciones no autorizadas a través del componente afectado."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"9.5.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T04:00:38.330155Z","id":"CVE-2026-18634","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-502"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66147","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T21:17:49.173","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos no autenticada fue identificada en el Servicio GMS Dispatcher en GMS 9.5.1 y versiones anteriores, que permite al atacante realizar ejecución remota de código a través de solicitudes especialmente diseñadas."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","platforms":["Windows","Linux"],"versions":[{"version":"9.5.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","baseScore":9.4,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T04:00:43.777245Z","id":"CVE-2026-66147","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66148","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T21:17:49.287","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos autenticada fue identificada en la Interfaz de Línea de Comandos (CLI) de GMS 9.5.1 (Build 9510.1044) y versiones anteriores, que permite a un usuario local de bajo privilegio ejecutar comandos del sistema con privilegios de root."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"9.5.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-11T21:10:54.382299Z","id":"CVE-2026-66148","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66149","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T21:17:49.393","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask."},{"lang":"es","value":"Control inadecuado de la generación de código (’Inyección de código’) Vulnerabilidad en el dispositivo SonicWall Email Security permite a un atacante autenticado con acceso a la CLI restringida de SonicWall Email Security puede inyectar comandos arbitrarios del SO que se ejecutan como root a través de la máscara de red."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.0.35.8405 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-11T00:00:00+00:00","id":"CVE-2026-66149","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0012","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66150","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T21:17:49.497","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP."},{"lang":"es","value":"Control inadecuado de la generación de código (’Inyección de código’) vulnerabilidad en el dispositivo SonicWall Email Security permite a un atacante autenticado con acceso a la CLI restringida de SonicWall Email Security inyectar comandos arbitrarios del sistema operativo que se ejecutan como root a través de SNMP."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Email Security","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.0.35.8405 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-11T00:00:00+00:00","id":"CVE-2026-66150","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0012","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66154","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-11T21:17:49.600","lastModified":"2026-10-24T16:10:00.153","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes."},{"lang":"es","value":"Una validación de certificado insuficiente en un flujo de trabajo de comunicación privilegiada fue identificada en una aplicación GMS 9.5.1 (Build 9510.1044) y versiones anteriores que, bajo un ataque MitM exitoso y condiciones de red controladas, podría permitir cambios no autorizados."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"GMS","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"9.5.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T04:00:37.248025Z","id":"CVE-2026-66154","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66152","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-25T20:17:01.147","lastModified":"2026-08-31T17:17:42.210","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.3.5 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-26T00:00:00+00:00","id":"CVE-2026-66152","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-29"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-66153","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-08-25T20:17:01.270","lastModified":"2026-08-28T18:58:27.140","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"NetExtender","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"10.3.5 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-26T00:00:00+00:00","id":"CVE-2026-66153","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-83548","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-09-01T22:17:13.170","lastModified":"2026-09-03T13:06:16.053","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03453 (platform-hotfix) and older versions","status":"affected"},{"version":"12.5.0-02835 (platform-hotfix) and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-01T00:00:00+00:00","id":"CVE-2026-83548","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-09-02","cisaActionDue":"2026-09-05","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-441"},{"lang":"en","value":"CWE-918"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03526","matchCriteriaId":"F160BF49-63F6-4458-AA1B-9D46AF320741"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02952","matchCriteriaId":"51E4FB42-435D-41F7-AF37-8235E3478CB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*","matchCriteriaId":"653B5F4D-7417-4A85-B385-46157A1540A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03526","matchCriteriaId":"796684A5-0639-4D62-8C3B-7E330F200964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02952","matchCriteriaId":"22DA8C27-F1AF-4136-AB59-4E03350B68AD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03526","matchCriteriaId":"70103B37-D895-4F07-B927-7CD4DE85DB9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02952","matchCriteriaId":"ACADD37E-AEE1-4B8A-9D49-5AB22D53C393"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-83549","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-09-01T22:17:13.290","lastModified":"2026-09-21T14:17:21.703","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03453 (platform-hotfix) and older versions","status":"affected"},{"version":"12.5.0-02835 (platform-hotfix) and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-03T03:55:31.034713Z","id":"CVE-2026-83549","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-09-02","cisaActionDue":"2026-09-05","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"SonicWall SMA1000 Appliances OS Command Injection Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03526","matchCriteriaId":"F160BF49-63F6-4458-AA1B-9D46AF320741"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02952","matchCriteriaId":"51E4FB42-435D-41F7-AF37-8235E3478CB5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*","matchCriteriaId":"653B5F4D-7417-4A85-B385-46157A1540A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03526","matchCriteriaId":"796684A5-0639-4D62-8C3B-7E330F200964"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02952","matchCriteriaId":"22DA8C27-F1AF-4136-AB59-4E03350B68AD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*","matchCriteriaId":"7B24D300-1154-49A1-A1F3-FB0CC717166A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"12.4.3-03526","matchCriteriaId":"70103B37-D895-4F07-B927-7CD4DE85DB9C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"12.5.0","versionEndExcluding":"12.5.0-02952","matchCriteriaId":"ACADD37E-AEE1-4B8A-9D49-5AB22D53C393"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*","matchCriteriaId":"E9B414C5-C376-4216-A267-ABC0930905CE"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83549","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-78327","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-09-04T19:17:27.347","lastModified":"2026-09-08T19:12:59.557","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the underlying host, resulting in remote code execution."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Network Security Manager (NSM)","defaultStatus":"unknown","platforms":["Linux","On-Prem"],"versions":[{"version":"4.3.0 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-04T19:49:49.013441Z","id":"CVE-2026-78327","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-78328","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-09-04T19:17:27.463","lastModified":"2026-09-08T19:12:59.557","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Network Security Manager (NSM)","defaultStatus":"unknown","platforms":["Linux","On-Prem"],"versions":[{"version":"4.3.0 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-04T19:49:15.329704Z","id":"CVE-2026-78328","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-81939","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-09-04T19:17:29.237","lastModified":"2026-09-08T19:12:59.557","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Network Security Manager (NSM)","defaultStatus":"unknown","platforms":["Linux","On-Prem"],"versions":[{"version":"4.3.0 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-04T19:47:14.778353Z","id":"CVE-2026-81939","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0015","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-102255","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-10-07T13:17:16.387","lastModified":"2026-10-07T16:17:32.440","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03526 (platform-hotfix) and older versions","status":"affected"},{"version":"12.5.0-02952 (platform-hotfix) and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-07T15:50:57.013778Z","id":"CVE-2026-102255","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-441"},{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-102256","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-10-07T13:17:16.553","lastModified":"2026-10-08T04:17:06.950","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03526 (platform-hotfix) and older versions","status":"affected"},{"version":"12.5.0-02952 (platform-hotfix) and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-07T00:00:00+00:00","id":"CVE-2026-102256","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-102257","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-10-07T14:17:07.740","lastModified":"2026-10-08T04:17:07.520","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03526 (platform-hotfix) and older versions","status":"affected"},{"version":"12.5.0-02952 (platform-hotfix) and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-07T00:00:00+00:00","id":"CVE-2026-102257","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-102258","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-10-07T14:17:07.883","lastModified":"2026-10-07T15:16:56.450","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SMA1000","defaultStatus":"unknown","platforms":["Linux"],"versions":[{"version":"12.4.3-03526 (platform-hotfix) and older versions","status":"affected"},{"version":"12.5.0-02952 (platform-hotfix) and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-07T14:37:28.413381Z","id":"CVE-2026-102258","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-100232","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-10-14T21:17:20.577","lastModified":"2026-10-15T20:38:04.303","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Network Security Manager (NSM)","defaultStatus":"unknown","platforms":["Linux","On-Prem"],"versions":[{"version":"4.3.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-15T16:19:23.942436Z","id":"CVE-2026-100232","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-96540","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-10-14T21:17:39.603","lastModified":"2026-10-15T20:38:04.303","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Network Security Manager (NSM)","defaultStatus":"unknown","platforms":["Linux","On-Prem"],"versions":[{"version":"4.3.1 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-15T16:20:12.570516Z","id":"CVE-2026-96540","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-109593","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-03T17:17:53.690","lastModified":"2026-11-03T20:32:50.687","vulnStatus":"Awaiting Analysis","cveTags":[{"sourceIdentifier":"PSIRT@sonicwall.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Global Management System (GMS)","defaultStatus":"unknown","platforms":["Windows","Linux"],"versions":[{"version":"9.5.2 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-03T17:06:10.311409Z","id":"CVE-2026-109593","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Primary","description":[{"lang":"en","value":"CWE-636"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-109594","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-03T17:17:53.917","lastModified":"2026-11-03T20:32:50.687","vulnStatus":"Awaiting Analysis","cveTags":[{"sourceIdentifier":"PSIRT@sonicwall.com","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"Global Management System (GMS)","defaultStatus":"unknown","platforms":["Windows","Linux"],"versions":[{"version":"9.5.2 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-03T17:05:39.571136Z","id":"CVE-2026-109594","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-107154","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:06.440","lastModified":"2026-11-06T21:13:01.193","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T19:11:36.659956Z","id":"CVE-2026-107154","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Primary","description":[{"lang":"en","value":"CWE-291"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-107155","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:06.623","lastModified":"2026-11-07T05:18:00.190","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T00:00:00+00:00","id":"CVE-2026-107155","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-942"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-19703","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:48.310","lastModified":"2026-11-06T21:13:01.193","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T19:22:36.454580Z","id":"CVE-2026-19703","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-19868","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:48.437","lastModified":"2026-11-09T19:42:13.887","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA)."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T00:00:00+00:00","id":"CVE-2026-19868","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-11-06","cisaActionDue":"2026-11-20","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability","weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-308"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.4-7015","matchCriteriaId":"639FC5E5-9895-4770-9663-0DCC1DB9CC2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*","matchCriteriaId":"50F3A318-F082-4BDD-80EA-51DB15D3458C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*","matchCriteriaId":"09CAD976-F02B-40D6-9584-B8146A5A2EA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*","matchCriteriaId":"9079ED9F-0458-4EA8-8E89-5D3D4CA8096F"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2700:-:*:*:*:*:*:*:*","matchCriteriaId":"8D8B0C7A-FD65-47CA-A625-150A90EFA7A1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3700:-:*:*:*:*:*:*:*","matchCriteriaId":"A69E000B-5806-46FD-A233-4E2CC9DD38D2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4700:-:*:*:*:*:*:*:*","matchCriteriaId":"8DF4A322-7CC7-4AB9-B10E-FFF34DF2182D"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5700:-:*:*:*:*:*:*:*","matchCriteriaId":"4C15FED5-C48C-47CF-9645-0563D77883C1"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_6700:-:*:*:*:*:*:*:*","matchCriteriaId":"A884B1BB-F201-4C77-9F6E-B8A884DCD4C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_10700:-:*:*:*:*:*:*:*","matchCriteriaId":"7C3BA5A3-1160-4793-A8D6-40B9D264BCC4"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_11700:-:*:*:*:*:*:*:*","matchCriteriaId":"6739DEA3-06FF-4FEB-9931-0DB27F63B70E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_13700:-:*:*:*:*:*:*:*","matchCriteriaId":"0250EDF9-0AEF-4711-8EF6-D447CF48BCAF"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nssp_15700:-:*:*:*:*:*:*:*","matchCriteriaId":"7D6CF3CF-256C-4C04-8BDF-B16398CD0459"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270:-:*:*:*:*:*:*:*","matchCriteriaId":"70340DD4-687B-402C-85AF-C2B80D0F1600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz270w:-:*:*:*:*:*:*:*","matchCriteriaId":"52847BA2-470B-4078-A79B-52095DB9214B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370:-:*:*:*:*:*:*:*","matchCriteriaId":"9853AE3A-B0EA-4249-AA7D-1F2051C9BF91"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz370w:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBDD10C-F89D-4051-BC70-67B41167FF9B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470:-:*:*:*:*:*:*:*","matchCriteriaId":"6C23940E-2F9D-447B-A740-42035ED5D400"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz470w:-:*:*:*:*:*:*:*","matchCriteriaId":"90C790AD-C40E-4527-8F83-D278282A9600"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570:-:*:*:*:*:*:*:*","matchCriteriaId":"C7DF76E0-8E3D-4E0D-A3BB-F5AE05A4C7C9"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570p:-:*:*:*:*:*:*:*","matchCriteriaId":"352DFCF9-E333-41C0-8033-91265768FD8E"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz570w:-:*:*:*:*:*:*:*","matchCriteriaId":"4C882C38-9DA5-4C03-BB23-AB2B448E3307"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz670:-:*:*:*:*:*:*:*","matchCriteriaId":"AEEA6065-48D3-4EC7-BD94-CBAE3D1010FF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.2-8015","matchCriteriaId":"5A473DAB-8000-444D-BEA2-3B0B38E8375E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_l:-:*:*:*:*:*:*:*","matchCriteriaId":"0E181C4C-8FB3-492A-8202-9C48EC07B76F"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_m:-:*:*:*:*:*:*:*","matchCriteriaId":"2D8A8488-D765-4F6F-93CF-61E188B1B7D6"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_s:-:*:*:*:*:*:*:*","matchCriteriaId":"0372B9D5-9774-4CF5-8D3A-7131B0A03061"},{"vulnerable":false,"criteria":"cpe:2.3:a:sonicwall:nsv_xs:-:*:*:*:*:*:*:*","matchCriteriaId":"855302DC-3FD6-48EE-BD9F-789AEBB3A518"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_2800:-:*:*:*:*:*:*:*","matchCriteriaId":"559FE8B8-E5E1-4E74-98AF-79AF0ECF9064"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_3800:-:*:*:*:*:*:*:*","matchCriteriaId":"3ED8014A-C7A4-4624-8D50-A9844871C1B6"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_4800:-:*:*:*:*:*:*:*","matchCriteriaId":"1BDD4AB6-878B-41BE-BA33-6A2ECE2BC85B"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:nsa_5800:-:*:*:*:*:*:*:*","matchCriteriaId":"D28BF416-D019-438B-954E-FB94697DC011"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280:-:*:*:*:*:*:*:*","matchCriteriaId":"56EC904E-4FCA-4B35-B188-639AE688DD14"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz280w:-:*:*:*:*:*:*:*","matchCriteriaId":"4B1618BE-A465-4E2F-BB7F-79E0AA930B1C"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380:-:*:*:*:*:*:*:*","matchCriteriaId":"83B9556B-0A33-4A27-B9E2-00F47969A566"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz380w:-:*:*:*:*:*:*:*","matchCriteriaId":"72D94F4D-CEC8-473B-A49C-466F6F7274D3"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz480:-:*:*:*:*:*:*:*","matchCriteriaId":"DCFE3403-6A5B-4735-9248-99297A2E4461"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz580:-:*:*:*:*:*:*:*","matchCriteriaId":"AAEE386F-5FE4-4F21-AD34-33B862AAD1CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz680:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6BC579-21A1-4C2F-B655-73B14C3409A7"},{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:tz80:-:*:*:*:*:*:*:*","matchCriteriaId":"129CC10F-E822-4BF7-9EB5-0D702020CB0C"}]}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-19868","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-77708","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:57.323","lastModified":"2026-11-06T21:13:01.193","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T19:21:18.582486Z","id":"CVE-2026-77708","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-77709","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:57.447","lastModified":"2026-11-06T21:13:01.193","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T19:21:51.287676Z","id":"CVE-2026-77709","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com"}]}},{"cve":{"id":"CVE-2026-82308","sourceIdentifier":"PSIRT@sonicwall.com","published":"2026-11-06T19:17:57.567","lastModified":"2026-11-06T21:13:01.193","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service."}],"affected":[{"source":"PSIRT@sonicwall.com","affectedData":[{"vendor":"SonicWall","product":"SonicOS","defaultStatus":"unknown","platforms":["Gen7","Gen8"],"versions":[{"version":"7.3.3-7015 and older versions","status":"affected"},{"version":"8.2.2-8015 and older versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-06T19:13:27.123905Z","id":"CVE-2026-82308","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT@sonicwall.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014","source":"PSIRT@sonicwall.com"}]}}]}