NetSight
high7.2

CVE-2025-32821

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to u…

Impact

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.

Affected products

VendorProductAffected versions
SonicwallSma 100 Firmware
before 10.2.1.15-81sv
SonicwallSma 200 Firmware
before 10.2.1.15-81sv
SonicwallSma 210 Firmware
before 10.2.1.15-81sv
SonicwallSma 400 Firmware
before 10.2.1.15-81sv
SonicwallSma 410 Firmware
before 10.2.1.15-81sv
SonicwallSma 500v Firmware
before 10.2.1.15-81sv

Weakness classification

References