CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-02-04
SonicWall SMA100 SSL-VPN SQL Injection and Credential Theft Vulnerability (CVE-2021-20016) Security Advisory
[Affected Scope] SonicWall SMA100 appliances running firmware build version 10.x
[Impact] Unauthenticated remote attackers can execute arbitrary SQL queries to retrieve usernames, passwords, and active session information, leading to complete device compromise
[Mitigation] Immediately upgrade the SMA100 firmware to version 10.2.0.5 or higher to apply official security patches