critical9.1Public exploit code
CVE-2021-20034
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file po…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SonicWall SMA 10.2.1.0-17sv - Password Reset2021-10-20 · webapps · hardware
Impact
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 200 Firmware | through 9.0.0.10-28sv from 10.2.0.0 through 10.2.0.7-34sv from 10.2.1.0 through 10.2.1.0-17sv |
| Sonicwall | Sma 210 Firmware | through 9.0.0.10-28sv from 10.2.0.0 through 10.2.0.7-34sv from 10.2.1.0 through 10.2.1.0-17sv |
| Sonicwall | Sma 400 Firmware | through 9.0.0.10-28sv from 10.2.0.0 through 10.2.0.7-34sv from 10.2.1.0 through 10.2.1.0-17sv |
| Sonicwall | Sma 410 Firmware | through 9.0.0.10-28sv from 10.2.0.0 through 10.2.0.7-34sv from 10.2.1.0 through 10.2.1.0-17sv |
| Sonicwall | Sma 500v | through 9.0.0.10-28sv from 10.2.0.0 through 10.2.0.7-34sv from 10.2.1.0 through 10.2.1.0-17sv |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021
- http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021