sonicwall sma7210 firmware

Name: sonicwall sma7210 firmware
Brand: sonicwall

productUS

cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical0high0medium0low

updated 2026-10-26

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-15410US	—OT critical	11.8% (96th)	KEV	no fix	2026-07-14	6 versions
CVE-2026-83549US	—OT critical	9.89% (96th)	KEV	12.5.0-02952	2026-09-01	2 versions
CVE-2026-83548US	—OT critical	8.04% (95th)	KEV	12.5.0-02952	2026-09-01	2 versions
CVE-2026-15409US	—OT critical	6.79% (94th)	KEV	no fix	2026-07-14	6 versions
CVE-2025-40602US	—OT critical	2.76% (86th)	KEV	12.4.3-03245	2025-12-18	2 versions
CVE-2025-23006US	critical9.8OT critical	23.4% (98th)	KEV	12.4.3-02854	2025-01-23	< 12.4.3-02854
CVE-2026-4112US	—	0.61% (49th)	Exploit	12.4.3-03387	2026-04-09	2 versions
CVE-2026-4114US	—	0.60% (48th)	—	12.4.3-03387	2026-04-09	2 versions
CVE-2026-4116US	—	0.42% (36th)	—	12.4.3-03387	2026-04-09	2 versions
CVE-2026-4113US	—	0.36% (30th)	—	12.4.3-03387	2026-04-09	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-176Improper Handling of Unicode Encoding2 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-441Unintended Proxy or Intermediary ('Confused Deputy')1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.