CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-12-08
SonicWall SMA 100 Series Apache mod_cgi Stack-based Buffer Overflow Remote Code Execution (RCE) Vulnerability (CVE-2021-20038)
[Affected Scope] SonicWall SMA 200, 210, 400, 410, and 500v appliances running firmware versions 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv, and earlier
[Impact] A remote unauthenticated attacker can execute arbitrary code with 'nobody' user privileges on the appliance by sending a specially crafted HTTP request, potentially leading to full system compromise
[Mitigation] Immediately upgrade the appliance firmware to the patched version (10.2.1.3-27sv or higher) and restrict external access to the management interface