CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-08-04
SonicWall SRA (Secure Remote Access) SQL Injection Vulnerability (CVE-2021-20028) Analysis and Mitigation Guide
[Affected Scope] End-of-life (EOL) SonicWall Secure Remote Access (SRA) appliances running all 8.x firmware and 9.0.0.9-26sv or earlier
[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via crafted payloads, potentially leading to credential theft, database compromise, and remote code execution (RCE)
[Mitigation] Since the affected products are EOL, immediately decommission the SRA appliances and migrate to supported SMA (Secure Mobile Access) series, or restrict external access via firewall rules