SonicWall SMA1000 Firmware vulnerabilities

5 CVEs affecting SonicWall SMA1000 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2170, published 2025-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability, published 2022-03-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-04-25. EPSS: 92.8% chance of exploitation in the next 30 days. A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
CVE-2023-0126, published 2023-01-19. High severity, CVSS 7.5. EPSS: 73.4% chance of exploitation in the next 30 days. Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root…
CVE-2021-33909, published 2021-07-20. High severity, CVSS 7.8. EPSS: 9.7% chance of exploitation in the next 30 days. fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root…
CVE-2020-5129, published 2020-03-26. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected…
CVE-2025-2170, published 2025-04-30. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated…