NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability1 · 1 read

CVE-2025-32820

CVSS 3.1: 8.8 high
EPSS: 3%p86
Published: May 7, 2025 · May 7, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-32820 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance writable.

Vendors: sonicwall

Products: sma 100 firmware, sma 200 firmware, sma 210 firmware, sma 400 firmware, sma 410 firmware, sma 500v firmware

Weakness: CWE-22

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news

5 stories

⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI

The Hacker NewsJan 20, 09:20 UTC · Jan 20, 2026Exploit / PoCCVE-2025-29824 CVE-2025-2775 CVE-2025-2776+194 · 1 read

60

SonicWall customers confront resurgence of actively exploited vulnerabilities

CyberScoopMay 9, 21:33 UTC · May 9, 2025VulnerabilityExploitedCVE-2023-44221 CVE-2021-20035 CVE-2025-23006+73

60

SonicWall fixed SMA 100 flaws that could be chained to execute arbitrary code

Security AffairsMay 9, 07:50 UTC · May 9, 2025Exploit / PoCCVE-2025-32819 CVE-2025-32820 CVE-2025-328213 · 1 read

60

SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root

The Hacker NewsMay 8, 13:56 UTC · May 8, 2025VulnerabilityExploitedCVE-2025-32819 CVE-2025-32820 CVE-2025-32821+31 · 1 read

60

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819)

Help Net SecurityMay 8, 00:00 UTC · May 8, 2025Exploit / PoCExploitedCVE-2025-32819 CVE-2025-32820 CVE-2025-328214 · 1 read

60