medium6.5Known exploited
CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-04-16. Federal due date: 2025-05-07.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 200 Firmware | before 9.0.0.11-31sv from 10.2.0.0 before 10.2.0.8-37sv from 10.2.1.0 before 10.2.1.1-19sv |
| Sonicwall | Sma 210 Firmware | before 9.0.0.11-31sv from 10.2.0.0 before 10.2.0.8-37sv from 10.2.1.0 before 10.2.1.1-19sv |
| Sonicwall | Sma 400 Firmware | before 9.0.0.11-31sv from 10.2.0.0 before 10.2.0.8-37sv from 10.2.1.0 before 10.2.1.1-19sv |
| Sonicwall | Sma 410 Firmware | before 9.0.0.11-31sv from 10.2.0.0 before 10.2.0.8-37sv from 10.2.1.0 before 10.2.1.1-19sv |
| Sonicwall | Sma 500v | before 9.0.0.11-31sv from 10.2.0.0 before 10.2.0.8-37sv from 10.2.1.0 before 10.2.1.1-19sv |