Vulnerabilità per vendor · aggiornato a ogni pubblicazione
Vulnerabilità SonicWall: CVE sfruttate e nostre analisi
SonicWall ha 19 vulnerabilità nel catalogo CISA Known Exploited Vulnerabilities, 5 delle quali aggiunte negli ultimi 12 mesi e 13 note per l'uso in campagne ransomware. Qui sotto: le 2 analisi pubblicate da Zero Hunt Research sui prodotti SonicWall, poi le voci del catalogo dalla più recente, con la scadenza federale.
Catalogo CISA versione 2026.10.21, pubblicato il 2026-10-21 14:04 UTC.
19
CVE in CISA KEV
5
Aggiunte negli ultimi 12 mesi
13
Uso noto nel ransomware
2
Analisi Zero Hunt
Prodotti con più voci nel KEV: SMA1000 Appliances (5) · SonicOS (3) · SonicWall Email Security (3) · SMA100 (2) · SMA100 Appliances (2) · Secure Remote Access (SRA) (1)
Le nostre analisi delle vulnerabilità SonicWall
2026-10-07
SonicWall SMA 1000 CVE-2026-102255: SSRF pre-auth, CVSS 10SonicWall corregge CVE-2026-102255, SSRF pre-auth CVSS 10 nella Work Place dell'SMA 1000. Nessuno sfruttamento — ma a luglio lo stesso apparato finì a root.
2026-07-16
SonicWall SMA1000: CVE-2026-15409 concatena SSRF e rootSMA1000 SonicWall sotto attacco attivo: la SSRF non autenticata CVE-2026-15409 si concatena con CVE-2026-15410 fino a root. Aggiorna a 12.4.3-03453 / 12.5.0-02835, poi caccia e ruota.
Tutte le 19 voci KEV
| Aggiunta | CVE | Prodotto e vulnerabilità | Scadenza federale | Segnalazioni | Nostra analisi |
|---|---|---|---|---|---|
| 2026-09-02 | CVE-2026-83549 | SMA1000 Appliances SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution. | 2026-09-05 | Triage forense | — |
| 2026-09-02 | CVE-2026-83548 | SMA1000 Appliances SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized oper… | 2026-09-05 | Triage forense | — |
| 2026-07-14 | CVE-2026-15410 | SMA1000 Appliances SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. | 2026-07-17 | RansomwareTriage forense | — |
| 2026-07-14 | CVE-2026-15409 | SMA1000 Appliances SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. | 2026-07-17 | RansomwareTriage forense | Leggi → |
| 2025-12-17 | CVE-2025-40602 | SMA1000 appliance SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices. | 2025-12-24 | — | |
| 2025-05-01 | CVE-2023-44221 | SMA100 Appliances SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as… | 2025-05-22 | — | |
| 2025-04-16 | CVE-2021-20035 | SMA100 Appliances SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentiall… | 2025-05-07 | — | |
| 2025-02-18 | CVE-2024-53704 | SonicOS SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication. | 2025-03-11 | Ransomware | — |
| 2025-01-24 | CVE-2025-23006 | SMA1000 Appliances SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbit… | 2025-02-14 | Ransomware | — |
| 2024-09-09 | CVE-2024-40766 | SonicOS SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. | 2024-09-30 | Ransomware | — |
| 2022-03-28 | CVE-2021-20028 | Secure Remote Access (SRA) SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection. | 2022-04-18 | Ransomware | — |
| 2022-03-28 | CVE-2019-7483 | SMA100 In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. | 2022-04-18 | — | |
| 2022-03-15 | CVE-2020-5135 | SonicOS A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. | 2022-04-05 | Ransomware | — |
| 2022-01-28 | CVE-2021-20038 | SMA 100 Appliances SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution. | 2022-02-11 | Ransomware | — |
| 2021-11-03 | CVE-2021-20023 | SonicWall Email Security SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit cha… | 2021-11-17 | Ransomware | — |
| 2021-11-03 | CVE-2021-20022 | SonicWall Email Security SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a… | 2021-11-17 | Ransomware | — |
| 2021-11-03 | CVE-2021-20021 | SonicWall Email Security SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has… | 2021-11-17 | Ransomware | — |
| 2021-11-03 | CVE-2021-20016 | SSLVPN SMA100 SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker. | 2021-11-17 | Ransomware | — |
| 2021-11-03 | CVE-2019-7481 | SMA100 SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources. | 2022-05-03 | Ransomware | — |
Fonte: catalogo CISA Known Exploited Vulnerabilities (dati pubblici). Le descrizioni sono di CISA, abbreviate. Verifica sempre l'advisory del vendor prima di intervenire. cisa.gov
Prima della patch: tre verifiche
- 01Confronta la versione e la configurazione esatte che usi con l'advisory del vendor. Avere il prodotto non significa essere esposti.
- 02Verifica la raggiungibilità: una falla sfruttata su un'interfaccia raggiungibile da internet, o da una postazione compromessa, passa in testa alla coda.
- 03Dove CISA indica il triage forense, oltre alla patch cerca tracce di compromissione: la correzione non elimina un attaccante entrato prima.
Domande
Quante vulnerabilità SonicWall ci sono nel catalogo CISA KEV?
19 nella versione 2026.10.21 del catalogo, la prima aggiunta il 2021-11-03 e la più recente il 2026-09-02. 5 sono state aggiunte negli ultimi 12 mesi.
Quali prodotti SonicWall hanno più vulnerabilità sfruttate?
Per numero di voci KEV: SMA1000 Appliances (5), SonicOS (3), SonicWall Email Security (3), SMA100 (2), SMA100 Appliances (2), Secure Remote Access (SRA) (1).
Le vulnerabilità SonicWall sono usate negli attacchi ransomware?
CISA indica 13 delle 19 voci SonicWall come note per l'uso in campagne ransomware. Nella tabella sono segnalate.
La prossima CVE SonicWall è sfruttabile nella tua rete?
Una voce KEV dice che una vulnerabilità è sfruttata da qualche parte. Zero Hunt risponde se è sfruttabile nel tuo ambiente: un red team AI autonomo su un'appliance on-premise, con AI privata, in black box o gray box e con una persona che approva ogni passo che conta.
Altri vendor: Cisco · Microsoft · Fortinet · Linux kernel · Citrix · GitLab · Adobe · Palo Alto Networks · Check Point · Langflow · Arista · Oracle · Ivanti · VMware · Zimbra · SAP · Atlassian · Zyxel · Progress · F5