8.8
CVE-2025-32819
- EPSS 6.79%
- Veröffentlicht 07.05.2025 17:18:23
- Zuletzt bearbeitet 19.05.2025 15:13:46
- Quelle PSIRT@sonicwall.com
- CVE-Watchlists
- Unerledigt
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Sma 100 Firmware Version < 10.2.1.15-81sv
Sonicwall ≫ Sma 200 Firmware Version < 10.2.1.15-81sv
Sonicwall ≫ Sma 210 Firmware Version < 10.2.1.15-81sv
Sonicwall ≫ Sma 400 Firmware Version < 10.2.1.15-81sv
Sonicwall ≫ Sma 410 Firmware Version < 10.2.1.15-81sv
Sonicwall ≫ Sma 500v Firmware Version < 10.2.1.15-81sv
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.79% | 0.932 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-552 Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0011
https://old.rapid7.com/blog/post/2025/05/07/multiple-vulnerabilities-in-sonicwall-sma-100-series-2025/