NetSight
high8.8

CVE-2025-32819

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file p…

Impact

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.

Affected products

VendorProductAffected versions
SonicwallSma 100 Firmware
before 10.2.1.15-81sv
SonicwallSma 200 Firmware
before 10.2.1.15-81sv
SonicwallSma 210 Firmware
before 10.2.1.15-81sv
SonicwallSma 400 Firmware
before 10.2.1.15-81sv
SonicwallSma 410 Firmware
before 10.2.1.15-81sv
SonicwallSma 500v Firmware
before 10.2.1.15-81sv

Weakness classification

References