IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.5Media KEV

CVE-2021-20035SonicWall SMA100 Appliances OS Command Injection Vulnerability

SonicWall SMA100 Publicada: (hace 5 años)

Explotación conocida — SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA confirmó el 16.04.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 07.05.2025.

Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022 ; https://nvd.nist.gov/vuln/detail/CVE-2021-20035

Descripción

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Debilidad (CWE): CWE-78

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
sonicwall sma 200 firmware < 9.0.0.11-31sv
sonicwall sma 210 firmware < 9.0.0.11-31sv
sonicwall sma 400 firmware < 9.0.0.11-31sv
sonicwall sma 410 firmware < 9.0.0.11-31sv
sonicwall sma 500v < 9.0.0.11-31sv
SonicWall SMA100 9.0.0.10-28sv and earlier, 10.2.0.7-34sv and earlier, 10.2.1.0-17sv and earlier

Referencias y parches

Coincidencias CPE (NVD) (15)
  • cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:* < 9.0.0.11-31sv
  • cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:* ≥ 10.2.0.0 < 10.2.0.8-37sv
  • cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:* ≥ 10.2.1.0 < 10.2.1.1-19sv
  • cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:* < 9.0.0.11-31sv
  • cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:* ≥ 10.2.0.0 < 10.2.0.8-37sv
  • cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:* ≥ 10.2.1.0 < 10.2.1.1-19sv
  • cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:* < 9.0.0.11-31sv
  • cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:* ≥ 10.2.0.0 < 10.2.0.8-37sv
  • cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:* ≥ 10.2.1.0 < 10.2.1.1-19sv
  • cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:* < 9.0.0.11-31sv
  • cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:* ≥ 10.2.0.0 < 10.2.0.8-37sv
  • cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:* ≥ 10.2.1.0 < 10.2.1.1-19sv
  • cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:* < 9.0.0.11-31sv
  • cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:* ≥ 10.2.0.0 < 10.2.0.8-37sv
  • cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:* ≥ 10.2.1.0 < 10.2.1.1-19sv

CVE recientes del mismo producto — SonicWall

5.1Media
CVE-2026-19703
SonicWall SonicOS

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limite…

5.9Media
CVE-2026-77709
SonicWall SonicOS

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

5.9Media
CVE-2026-77708
SonicWall SonicOS

A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

7.5Alta
CVE-2026-82308
SonicWall SonicOS

A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote unauthenticated attacker to cause an application level denial of service.

8.8Alta
CVE-2026-107154
SonicWall SonicOS

A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.