How many sonicwall sma1000 firmware CVEs are in CISA KEV?

Yes — 1 of sonicwall sma1000 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of sonicwall sma1000 firmware are affected?

5 distinct sonicwall sma1000 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sonicwall sma1000 firmware CVEs?

sonicwall sma1000 firmware's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-248 (Uncaught Exception), CWE-665 (Improper Initialization), CWE-918 (Server-Side Request Forgery (SSRF)).

What is the average severity of sonicwall sma1000 firmware CVEs?

The average CVSS base score across sonicwall sma1000 firmware's scored CVEs is 7.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

sonicwall

5 CVEs

1 in CISA KEV

sonicwall sma1000 firmware Vulnerabilities

Name: sonicwall sma1000 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for sma1000 firmware by sonicwall.

5

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.7

Avg CVSS

2020–2025

Last updated April 30, 2025

Overview

sonicwall sma1000 firmware has 5 published CVE records since 2020, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting sonicwall sma1000 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include sma1000.

Severity and exploitation

How the CVSS severity of sonicwall sma1000 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of sonicwall sma1000 firmware's CVEs is confirmed exploited in the wild.

Public exploits

2

2 of sonicwall sma1000 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every sonicwall sma1000 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 12.4.2-020442 CVEs
< 12.4.3-029251 CVE
<= 12.1.0-064111 CVE
12.4.2 <= v <= 12.4.21 CVE

Fixed in

12.4.3-029251 CVE

Find a version

5 CVEs

Sort

High vulnerability · 2025-04-30
CVE-2025-2170
Patch
CWE-918
High · CVSS 7.2
EPSS 0.3% (25th pct)2025-04-30
High vulnerability · 2023-01-19
CVE-2023-0126CWE-22
High · CVSS 7.5
EPSS 72.7% (99th pct)2023-01-19
High vulnerability · 2022-03-07
CVE-2022-0847
CISA KEV
Public exploit
Patch
CWE-665
Added to CISA KEV 2022-04-25
High · CVSS 8.5
EPSS 88.6% (100th pct)2022-03-07
High vulnerability · 2021-07-20
CVE-2021-33909
Public exploit
Patch
High · CVSS 7.8
EPSS 9.7% (95th pct)2021-07-20
High vulnerability · 2020-03-26
CVE-2020-5129CWE-248
High · CVSS 7.5
EPSS 1.3% (68th pct)2020-03-26

Common weakness types

The CWE weakness categories most often found in sonicwall sma1000 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many sonicwall sma1000 firmware CVEs were published each year.

2020

1

2021

1

2022

1

2023

1

2025

1

Other sonicwall products

Browse vulnerabilities for other products by sonicwall.

sonicos82 CVEs tz37037 CVEs tz370w37 CVEs tz47037 CVEs tz470w37 CVEs tz57037 CVEs tz570p37 CVEs tz570w37 CVEs

All sonicwall vulnerabilities

Frequently asked questions

Common questions about sonicwall sma1000 firmware vulnerabilities.

How many CVEs does sonicwall sma1000 firmware have?: sonicwall sma1000 firmware has 5 published CVE records since 2020.
How many sonicwall sma1000 firmware CVEs are in CISA KEV?: Yes — 1 of sonicwall sma1000 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for sonicwall sma1000 firmware vulnerabilities?: Yes — 2 of sonicwall sma1000 firmware's CVEs have a known public exploit.
Which versions of sonicwall sma1000 firmware are affected?: 5 distinct sonicwall sma1000 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sonicwall sma1000 firmware CVEs?: sonicwall sma1000 firmware's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-248 (Uncaught Exception), CWE-665 (Improper Initialization), CWE-918 (Server-Side Request Forgery (SSRF)).
What is the average severity of sonicwall sma1000 firmware CVEs?: The average CVSS base score across sonicwall sma1000 firmware's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sonicwall sma1000 firmware vulnerabilities

Monitor new sonicwall sma1000 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing