high8.8
CVE-2021-20026
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request.
Impact
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Network Security Manager | before 2.2.0 Version 2.2.0 |