sonicwall sma 400 firmware 10.2.1.2-24sv vulnerabilities and exploits

(subscribe to this query)

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated malicious user to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and previous versions 10.x versions.

Sonicwall Sma 100 Firmware Sonicwall Sma 100 Firmware 10.2.0.8-37sv Sonicwall Sma 100 Firmware 10.2.1.2-24sv Sonicwall Sma 200 Firmware Sonicwall Sma 200 Firmware 10.2.0.8-37sv Sonicwall Sma 200 Firmware 10.2.1.2-24sv Sonicwall Sma 210 Firmware Sonicwall Sma 210 Firmware 10.2.0.8-37sv Sonicwall Sma 210 Firmware 10.2.1.2-24sv Sonicwall Sma 400 Firmware Sonicwall Sma 400 Firmware 10.2.0.8-37sv Sonicwall Sma 400 Firmware 10.2.1.2-24sv Sonicwall Sma 410 Firmware Sonicwall Sma 410 Firmware 10.2.0.8-37sv Sonicwall Sma 410 Firmware 10.2.1.2-24sv Sonicwall Sma 500v Firmware Sonicwall Sma 500v Firmware 10.2.0.8-37sv Sonicwall Sma 500v Firmware 10.2.1.2-24sv

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.

Sonicwall Sma 100 Firmware Sonicwall Sma 100 Firmware 10.2.0.8-37sv Sonicwall Sma 100 Firmware 10.2.1.2-24sv Sonicwall Sma 200 Firmware Sonicwall Sma 200 Firmware 10.2.0.8-37sv Sonicwall Sma 200 Firmware 10.2.1.2-24sv Sonicwall Sma 210 Firmware Sonicwall Sma 210 Firmware 10.2.0.8-37sv Sonicwall Sma 210 Firmware 10.2.1.2-24sv Sonicwall Sma 400 Firmware Sonicwall Sma 400 Firmware 10.2.0.8-37sv Sonicwall Sma 400 Firmware 10.2.1.2-24sv Sonicwall Sma 410 Firmware Sonicwall Sma 410 Firmware 10.2.0.8-37sv Sonicwall Sma 410 Firmware 10.2.1.2-24sv Sonicwall Sma 500v Firmware Sonicwall Sma 500v Firmware 10.2.0.8-37sv Sonicwall Sma 500v Firmware 10.2.1.2-24sv

1 Github repository

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated malicious user to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210...

Sonicwall Sma 200 Firmware 10.2.0.8-37sv Sonicwall Sma 200 Firmware 10.2.1.1-19sv Sonicwall Sma 200 Firmware 10.2.1.2-24sv Sonicwall Sma 210 Firmware 10.2.0.8-37sv Sonicwall Sma 210 Firmware 10.2.1.1-19sv Sonicwall Sma 210 Firmware 10.2.1.2-24sv Sonicwall Sma 410 Firmware 10.2.0.8-37sv Sonicwall Sma 410 Firmware 10.2.1.1-19sv Sonicwall Sma 410 Firmware 10.2.1.2-24sv Sonicwall Sma 400 Firmware 10.2.0.8-37sv Sonicwall Sma 400 Firmware 10.2.1.1-19sv Sonicwall Sma 400 Firmware 10.2.1.2-24sv Sonicwall Sma 500v Firmware 10.2.0.8-37sv Sonicwall Sma 500v Firmware 10.2.1.1-19sv Sonicwall Sma 500v Firmware 10.2.1.2-24sv

3 Github repositories1 Article

Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated malicious user to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410...

Sonicwall Sma 200 Firmware 9.0.0.11-31sv Sonicwall Sma 200 Firmware 10.2.0.8-37sv Sonicwall Sma 200 Firmware 10.2.1.1-19sv Sonicwall Sma 210 Firmware 9.0.0.11-31sv Sonicwall Sma 210 Firmware 10.2.0.8-37sv Sonicwall Sma 210 Firmware 10.2.1.1-19sv Sonicwall Sma 410 Firmware 9.0.0.11-31sv Sonicwall Sma 410 Firmware 10.2.0.8-37sv Sonicwall Sma 410 Firmware 10.2.1.1-19sv Sonicwall Sma 400 Firmware 9.0.0.11-31sv Sonicwall Sma 400 Firmware 10.2.0.8-37sv Sonicwall Sma 400 Firmware 10.2.1.1-19sv Sonicwall Sma 500v Firmware 9.0.0.11-31sv Sonicwall Sma 500v Firmware 10.2.0.8-37sv Sonicwall Sma 500v Firmware 10.2.1.1-19sv

1 Metasploit module1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook