8.0.0.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-23	CVE-2021-20049	Information Exposure Through Discrepancy vulnerability in Sonicwall products A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. network low complexity sonicwall CWE-203	7.5
2021-12-23	CVE-2021-20050	Unspecified vulnerability in Sonicwall products An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data. network low complexity sonicwall	7.5
2021-09-27	CVE-2021-20034	Path Traversal vulnerability in Sonicwall products An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. network low complexity sonicwall CWE-22 critical	9.1
2021-09-27	CVE-2021-20035	OS Command Injection vulnerability in Sonicwall products Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS. network low complexity sonicwall CWE-78	6.5
2021-08-04	CVE-2021-20028	SQL Injection vulnerability in Sonicwall products Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier network low complexity sonicwall CWE-89 critical	9.8