SonicWall has confirmed that two previously patched security vulnerabilities affecting its SMA100 Secure Mobile Access (SMA) appliances are currently being exploited in real-world attacks.
The two vulnerabilities are:
These issues affect devices in the SMA 100 Series lineup, including models SMA 200, 210, 400, 410, and 500v. SonicWall issued patches on the following versions:
In a security advisory update on April 29, 2025, SonicWall urged customers to inspect their SMA devices for signs of unauthorized access. The company noted that further investigation revealed a new exploitation technique involving CVE-2024-38475 that could lead to session hijacking through unauthorized file access.
At this time, SonicWall has not disclosed specific details about the methods used to exploit these flaws, the identities of the attackers, or the extent of the impact.
This alert follows recent action by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which added another SonicWall SMA 100 Series vulnerability—CVE-2021-20035 (CVSS 7.2)—to its Known Exploited Vulnerabilities (KEV) catalog due to confirmed active exploitation.
SonicWall advises all users to update their devices to the latest firmware versions and to monitor for unusual activity.
VND is dedicated to helping our clients with solutions that work. We offer customized pricing for companies big and small, no matter the industry. Tell us more about your project to get started.
