Skip to content
COOEY

FAIL › dossier

SMA100

PRODUCT

· dossier confidence 50%

The SMA100 is a SonicWall network security appliance with a documented history of critical web interface vulnerabilities, including unauthenticated SQL injection and directory traversal flaws that allowed attackers to execute remote code and probe server files.

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
1
Worst shame
72
PROFILE
Categorynetwork security applianceWhat they doThe SMA100 is a SonicWall network security appliance designed for small to medium-sized businesses.
SECURITY POSTURE

The SMA100 has a poor security track record, evidenced by multiple critical and high-severity vulnerabilities in its web interface that allowed unauthenticated attackers to execute remote code and traverse directories.

Notable failures
  • CVE-2019-7481: Unauthenticated SQL injection leading to RCE
  • CVE-2019-7483: Unauthenticated directory traversal
Patterns: unauthenticated web interface vulnerabilities; critical RCE via SQL injection
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2021-11-03 CVE-2019-7481 critical SonicWall SMA100 exposed to SQL injection, unauth'd users gained read-only access
2022-03-28 CVE-2019-7483 high SonicWall SMA100 unauthenticated directory traversal flaw lets attackers probe for files on the server.
Open questions: SMA100 release date · SMA100 end-of-life status
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-05 03:56:29.329373+00:00