NetSight
high8.8

CVE-2021-20044

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the ap…

Impact

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Affected products

VendorProductAffected versions
SonicwallSma 200 Firmware
Versions 10.2.0.8-37sv, 10.2.1.1-19sv
SonicwallSma 210 Firmware
Versions 10.2.0.8-37sv, 10.2.1.1-19sv
SonicwallSma 410 Firmware
Versions 10.2.0.8-37sv, 10.2.1.1-19sv
SonicwallSma 400 Firmware
Versions 10.2.0.8-37sv, 10.2.1.1-19sv
SonicwallSma 500v Firmware
Versions 10.2.0.8-37sv, 10.2.1.1-19sv

Weakness classification

References