PatchTheCVEsma 200 firmware vulnerabilities and fixes
Recent CVEs affecting sma 200 firmware, with upgrade or downgrade steps. 9 tracked.
Also searched as: sma200firmware.
sma 200 firmware has 9 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 9. Most recent: 2025-05-07. Highest priority: CVE-2024-38475 (score 92/100).
- CVE-2025-32821 HIGH 7.2 UPGRADE UPGRADE A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin p
- CVE-2025-32820 HIGH 8.8 UPGRADE UPGRADE A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path
- CVE-2025-32819 HIGH 8.8 UPGRADE UPGRADE A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the pat
- CVE-2024-53703 HIGH 8.1 UPGRADE UPGRADE A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library
- CVE-2024-53702 MEDIUM 5.3 UPGRADE UPGRADE Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLV
- CVE-2024-45319 MEDIUM 6.3 UPGRADE UPGRADE A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote
- CVE-2024-45318 HIGH 8.1 UPGRADE UPGRADE A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack
- CVE-2024-40763 HIGH 7.5 UPGRADE UPGRADE Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy
- CVE-2024-38475 CRITICAL 9.1 EXPLOITED UPGRADE MITIGATE Apache HTTP Server Improper Escaping of Output Vulnerability
FAQ
How do I fix sma 200 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sma 200 firmware being exploited right now?
Yes: 1 sma 200 firmware CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which sma 200 firmware CVE should I patch first?
CVE-2024-38475 currently ranks highest (92/100): Apache HTTP Server Improper Escaping of Output Vulnerability.