high8.8
CVE-2021-20017
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user.
Impact
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma100 Firmware | through 10.2.0.5 |