Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SonicWall — Vulnerabilities & Security Advisories 212

Browse all 212 CVE security advisories affecting SonicWall. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SonicWall provides network security appliances and cloud-based services primarily focused on firewall management, intrusion prevention, and email security for enterprise environments. Historically, its firmware has been susceptible to a wide array of critical vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from improper input validation, insecure default configurations, or insufficient access controls within the management interfaces. A significant notable incident involved the widespread exploitation of the "SonicWall Global Management System" vulnerability, which allowed attackers to gain unauthorized administrative access to thousands of devices globally. The high volume of recorded CVEs reflects ongoing challenges in securing complex network infrastructure software. While the company actively releases patches, the frequency of disclosed flaws highlights persistent risks associated with its hardware and software ecosystem, necessitating rigorous update protocols for administrators to mitigate potential breaches and data exfiltration attempts.

CVE ID Title CVSS Severity Published
CVE-2021-20044 Sonicwall SMA100 操作系统命令注入漏洞 — SonicWall SMA100 CWE-78 8.8 - 2021-12-08
CVE-2021-20043 Sonicwall SMA100 缓冲区错误漏洞 — SonicWall SMA100 CWE-122 8.8 - 2021-12-08
CVE-2021-20042 SonicWall SMA100 安全漏洞 — SonicWall SMA100 CWE-441 9.3 - 2021-12-08
CVE-2021-20041 SonicWall SMA100安全漏洞 — SonicWall SMA100 CWE-835 7.5 - 2021-12-08
CVE-2021-20040 Sonicwall SMA100 路径遍历漏洞 — SonicWall SMA100 CWE-23 5.3 - 2021-12-08
CVE-2021-20039 Sonicwall SMA100 操作系统操作系统命令注入漏洞 — SonicWall SMA100 CWE-78 8.8 - 2021-12-08
CVE-2021-20038 Sonicwall SMA100 缓冲区错误漏洞 — SonicWall SMA100 CWE-121 9.8 - 2021-12-08
CVE-2021-20031 SonicOS 输入验证错误漏洞 — SonicOS CWE-601 6.1 - 2021-10-12
CVE-2021-20035 Sonicwall SMA100 操作系统命令注入漏洞 — SMA100 CWE-78 6.5 - 2021-09-27
CVE-2021-20034 Sonicwall SMA100 路径遍历漏洞 — SMA100 CWE-284 9.1 - 2021-09-27
CVE-2021-20037 SonicWall Global VPN client 安全漏洞 — SonicWall Global VPN Client CWE-276 7.8 - 2021-09-21
CVE-2021-20032 SonicWall Analytics 配置错误漏洞 — SonicWall Analytics On-Prem CWE-16 9.8 - 2021-08-10
CVE-2021-20028 Claroty Secure Remote Access SQL注入漏洞 — SonicWall SRA/SMA100 CWE-89 9.8 - 2021-08-04
CVE-2021-20024 SonicWall Switch 缓冲区错误漏洞 — SonicWall Switch CWE-125 9.1 - 2021-07-09
CVE-2021-20019 SonicWALL SonicOS 缓冲区错误漏洞 — SonicOS CWE-200 7.5 - 2021-06-23
CVE-2021-20027 SonicWall SonicOS 缓冲区错误漏洞 — SonicOS CWE-120 7.5 - 2021-06-14
CVE-2021-20026 SonicWall NSM On-Prem 操作系统命令注入漏洞 — SonicWall NSM On-Prem CWE-78 8.8 - 2021-05-27
CVE-2021-20025 SonicWall Email Security Appliance 信任管理问题漏洞 — Email Security Virtual Appliance CWE-798 8.4 - 2021-05-13
CVE-2021-20023 Sonicwall On-premise Email 路径遍历漏洞 — Email Security CWE-22 4.9 - 2021-04-20
CVE-2021-20020 SonicWall Global Management System 授权问题漏洞 — Global Management System (GMS) CWE-287 9.8 - 2021-04-10
CVE-2021-20022 Sonicwall SonicWall Email Security Appliance 代码问题漏洞 — Email Security CWE-434 7.2 - 2021-04-09
CVE-2021-20021 Sonicwall SonicWall Email Security Appliance 安全漏洞 — Email Security CWE-269 9.8 - 2021-04-09
CVE-2021-20018 Sonicwall SMA100 授权问题漏洞 — SMA100 CWE-200 6.5 - 2021-03-13
CVE-2021-20017 Sonicwall SMA100 操作系统命令注入漏洞 — SMA100 CWE-78 8.8 - 2021-03-13
CVE-2020-5148 SonicWall SSO-agent 授权问题漏洞 — Directory Services Connector CWE-287 9.8 - 2021-03-05
CVE-2021-20016 Sonicwall SMA100 SQL注入漏洞 — SonicWall SMA100 CWE-89 9.8 - 2021-02-03
CVE-2020-5147 Sonicwall SonicWall NetExtender Windows client 代码问题漏洞 — SonicWall NetExtender CWE-428 7.8 - 2021-01-09
CVE-2020-5146 Sonicwall SMA100 操作系统命令注入漏洞 — SMA100 CWE-78 7.2 - 2021-01-09
CVE-2020-5144 SonicWall Global VPN client 代码问题漏洞 — SonicWall Global VPN Client CWE-426 8.4 - 2020-10-28
CVE-2020-5145 SonicWall Global VPN client 代码问题漏洞 — SonicWall Global VPN Client CWE-427 7.8 - 2020-10-28

This page lists every published CVE security advisory associated with SonicWall. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.