SonicWall SMA100

Name: SonicWall SMA100
Brand: SonicWall

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical13high5medium0low

updated 2026-10-25

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-7481US	high7.5OT critical	99.9% (100th)	KEV	no fix	2019-12-17	≤ 9.0.0.3 and earlier
CVE-2023-44221US	high7.2OT critical	76.3% (100th)	KEV	no fix	2023-12-05	≤ 10.2.1.9-57sv and earlier versions
CVE-2021-20035US	medium6.5OT critical	4.41% (91st)	KEV	no fix	2021-09-27	3 versions
CVE-2019-7483US	high7.5OT critical	4.01% (91st)	KEV	no fix	2019-12-19	≤ 9.0.0.3 and earlier
CVE-2021-20034US	critical9.1	81.8% (100th)	Exploit	no fix	2021-09-27	3 versions
CVE-2024-53703US	—	12.6% (96th)	Exploit	no fix	2024-12-05	≤ 10.2.1.13-72sv and earlier versions
CVE-2019-7482US	critical9.8	8.82% (95th)	Exploit	no fix	2019-12-19	≤ 9.0.0.3 and earlier
CVE-2025-32821US	high7.2	22.2% (98th)	—	no fix	2025-05-07	2 versions
CVE-2022-1703US	high8.8	13.0% (96th)	—	no fix	2022-06-08	2 versions
CVE-2022-2915US	high8.8	6.87% (94th)	—	no fix	2022-08-26	≤ 10.2.1.5-34sv and earlier
CVE-2025-32819US	high8.8	6.45% (94th)	—	no fix	2025-05-07	2 versions
CVE-2025-32820US	high8.8	2.88% (87th)	—	no fix	2025-05-07	2 versions
CVE-2020-5146US	high7.2	1.91% (80th)	—	no fix	2021-01-09	≤ 10.2.0.2-20sv and earlier
CVE-2021-20017US	high8.8	1.89% (79th)	—	no fix	2021-03-13	≤ 10.2.0.5 and earlier
CVE-2019-7486US	high8.8	1.58% (75th)	—	no fix	2019-12-19	≤ 9.0.0.4 and earlier
CVE-2019-7485US	high8.8	1.53% (75th)	—	no fix	2019-12-19	≤ 9.0.0.3 and earlier
CVE-2024-45318US	—	1.04% (64th)	—	no fix	2024-12-05	≤ 10.2.1.13-72sv and earlier versions
CVE-2020-5132US	medium5.3	0.98% (62nd)	—	no fix	2020-09-30	≤ SMA100 10.2.0.2-20sv
CVE-2024-40763US	—	0.94% (61st)	—	no fix	2024-12-05	≤ 10.2.1.13-72sv and earlier versions
CVE-2023-5970US	high8.8	0.91% (60th)	—	no fix	2023-12-05	≤ 10.2.1.9-57sv and earlier versions
CVE-2019-7484US	medium6.5	0.84% (58th)	—	no fix	2019-12-19	≤ 9.0.0.3 and earlier
CVE-2021-20018US	medium4.9	0.70% (53rd)	—	no fix	2021-03-13	≤ 10.2.0.5 and earlier
CVE-2025-40603US	—	0.48% (41st)	—	no fix	2025-10-31	≤ 10.2.2.2-92sv and earlier versions
CVE-2024-22395US	medium6.3	0.43% (37th)	—	no fix	2024-02-24	2 versions
CVE-2024-53702US	—	0.33% (26th)	—	no fix	2024-12-05	≤ 10.2.1.13-72sv and earlier versions
CVE-2024-45319US	—OT elevated	0.23% (14th)	—	no fix	2024-12-05	≤ 10.2.1.13-72sv and earlier versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)26 CVEs
NLNCSC-NL (CSAF)3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan