CVE-2021-20034
critical · 9.1An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
9.1
CVSS
81.0%
EPSS (exploit prob.)
100th
EPSS percentile
2021-09-27
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-284CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sonicwall | sma_200_firmware | <= 9.0.0.10-28sv |
| sonicwall | sma_200_firmware | >= 10.2.0.0, <= 10.2.0.7-34sv |
| sonicwall | sma_200_firmware | >= 10.2.1.0, <= 10.2.1.0-17sv |
| sonicwall | sma_200 | all versions |
| sonicwall | sma_210_firmware | <= 9.0.0.10-28sv |
| sonicwall | sma_210_firmware | >= 10.2.0.0, <= 10.2.0.7-34sv |
| sonicwall | sma_210_firmware | >= 10.2.1.0, <= 10.2.1.0-17sv |
| sonicwall | sma_210 | all versions |
| sonicwall | sma_400_firmware | <= 9.0.0.10-28sv |
| sonicwall | sma_400_firmware | >= 10.2.0.0, <= 10.2.0.7-34sv |
| sonicwall | sma_400_firmware | >= 10.2.1.0, <= 10.2.1.0-17sv |
| sonicwall | sma_400 | all versions |
| sonicwall | sma_410_firmware | <= 9.0.0.10-28sv |
| sonicwall | sma_410_firmware | >= 10.2.0.0, <= 10.2.0.7-34sv |
| sonicwall | sma_410_firmware | >= 10.2.1.0, <= 10.2.1.0-17sv |
| sonicwall | sma_410 | all versions |
| sonicwall | sma_500v | <= 9.0.0.10-28sv |
| sonicwall | sma_500v | >= 10.2.0.0, <= 10.2.0.7-34sv |
| sonicwall | sma_500v | >= 10.2.1.0, <= 10.2.1.0-17sv |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021
- http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-20034