high8.8
CVE-2025-32820
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the …
Impact
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 100 Firmware | before 10.2.1.15-81sv |
| Sonicwall | Sma 200 Firmware | before 10.2.1.15-81sv |
| Sonicwall | Sma 210 Firmware | before 10.2.1.15-81sv |
| Sonicwall | Sma 400 Firmware | before 10.2.1.15-81sv |
| Sonicwall | Sma 410 Firmware | before 10.2.1.15-81sv |
| Sonicwall | Sma 500v Firmware | before 10.2.1.15-81sv |