Skip to content
COOEY

FAIL › dossier

SMA100 Appliances

PRODUCT

· dossier confidence 50%

SMA100 Appliances are network security devices from SonicWall with a poor security track record, evidenced by multiple high-severity remote code execution vulnerabilities allowing arbitrary command execution by authenticated attackers.

Failure events
2
Zero-days
0
RCEs
2
On KEV
2
Critical
0
Worst shame
72
PROFILE
Categorynetwork security applianceWhat they doSMA100 Appliances are network security devices manufactured by SonicWall.
SECURITY POSTURE

The SMA100 appliance has a documented history of critical remote code execution vulnerabilities, including command injection flaws that allow authenticated attackers to execute arbitrary commands remotely.

Notable failures
  • CVE-2021-20035: authenticated remote command injection as low-privilege user
  • CVE-2023-44221: authenticated remote OS command injection as admin
Patterns: repeated remote code execution vulnerabilities in edge devices
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2025-04-16 CVE-2021-20035 high SonicWall SMA100 appliances had a command injection vulnerability allowing authenticated attackers to execute arbitrary commands remotely as a low-privilege user.
2025-05-01 CVE-2023-44221 high SonicWall SMA100 appliances have a critical OS command injection vulnerability allowing authenticated admins to execute arbitrary commands remotely.
Open questions: SonicWall corporate founding date · SonicWall headquarters location · SonicWall corporate size · SonicWall ownership structure · SonicWall corporate website
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-16 04:27:15.693844+00:00