Skip to main content

Sra 4600 Firmware

2 CVEs product

Monthly

CVE-2022-22273 CRITICAL PATCH Act Now

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Sma 200 Firmware Sma 210 Firmware Sma 400 Firmware Sma 410 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-20028 CRITICAL KEV THREAT Act Now

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Sma 210 Firmware Sma 410 Firmware Sma 500V Firmware Sra 4600 Firmware +2
NVD
CVSS 3.1
9.8
EPSS
30.1%
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Sma 200 Firmware Sma 210 Firmware +7
NVD
EPSS 30% CVSS 9.8
CRITICAL KEV THREAT Act Now

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Sma 210 Firmware Sma 410 Firmware +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy