SonicWall: vulnerabilidades explotadas
- 19vulnerabilidades explotadas
- 13usado por ransomware
- 2 sept 2026la última añadida
- SMA1000 Appliances 5
- SonicOS 3
- SonicWall Email Security 3
- SMA100 Appliances 2
- SMA100 2
- SMA1000 appliance 1
- Secure Remote Access (SRA) 1
- SMA 100 Appliances 1
- SSLVPN SMA100 1
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 2 sept 2026 | OS Command Injection | SMA1000 Appliances | Alto 7,8 | 9,9% |
| 2 sept 2026 | Server-Side Request Forgery | SMA1000 Appliances | Crítica 10,0 | 8,0% |
| 14 jul 2026 | Code Injection | SMA1000 Appliances | Alto 7,2 | 12% |
| 14 jul 2026 | Server-Side Request Forgery | SMA1000 Appliances | Crítica 10,0 | 6,8% |
| 17 dic 2025 | SMA1000 Missing Authorization | SMA1000 appliance | Media 6,6 | 2,8% |
| 1 may 2025 | OS Command Injection | SMA100 Appliances | Alto 7,2 | 76% |
| 16 abr 2025 | OS Command Injection | SMA100 Appliances | Media 6,5 | 4,4% |
| 18 feb 2025 | SSLVPN Improper Authentication | SonicOS | Alto 8,2 | 95% |
| 24 ene 2025 | Deserialization | SMA1000 Appliances | Crítica 9,8 | 23% |
| 9 sept 2024 | Improper Access Control | SonicOS | Crítica 9,3 | 18% |
| 28 mar 2022 | SQL Injection | Secure Remote Access (SRA) | Crítica 9,8 | 30% |
| 28 mar 2022 | Directory Traversal | SMA100 | Alto 7,5 | 4,0% |
| 15 mar 2022 | Buffer Overflow | SonicOS | Crítica 9,8 | 27% |
| 28 ene 2022 | Stack-Based Buffer Overflow | SMA 100 Appliances | Crítica 9,8 | 99,9% |
| 3 nov 2021 | Email Security Path Traversal | SonicWall Email Security | Media 4,9 | 52% |
| 3 nov 2021 | Email Security Unrestricted Upload of File | SonicWall Email Security | Alto 7,2 | 17% |
| 3 nov 2021 | Email Security Improper Privilege Management | SonicWall Email Security | Crítica 9,8 | 89% |
| 3 nov 2021 | SQL Injection | SSLVPN SMA100 | Crítica 9,8 | 40% |
| 3 nov 2021 | SQL Injection | SMA100 | Alto 7,5 | 99,9% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.