VDB
CISA-2025-32821
CISA-2025-32821
PUBLISHED
CVSS 7.1 HIGH
Reported by sonicwall · Published May 7, 2025
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.
Risk Scores
CVSS 3.1
7.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SonicWall | SMA100 | 10.2.1.14-75sv and earlier versions |
| SonicWall | SMA100 | *, 10.2.1.14-75sv and earlier versions |
Timeline
- May 7, 2025 CVE Published
- Feb 26, 2026 CVE Updated