← Database

CVE-2025-32820

HIGH CVSS: 8.8 Published: 2025-05-07 Modified: 2026-06-17

Description

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.

Affected Platforms

Sonicwall Sma 500VSonicwall Sma 410 FirmwareSonicwall Sma 200Sonicwall Sma 200 FirmwareSonicwall Sma 500V FirmwareSonicwall Sma 210 FirmwareSonicwall Sma 400Sonicwall Sma 210Sonicwall Sma 410Sonicwall Sma 100

Weakness Type

CWE-22

References