Description: A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server’s mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a ‘nobody’ user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.
CVE-2021-20038
Published Date: 2021-12-08T10:15Z
Last Modified: 2022-05-13T14:54Z
CVSS Score: 9.8 (CRITICAL)
EPSS Score: 95.15%
Risk Score: 7.15 (CRITICAL)
Risk Score based on CVSS score and EPSS. This score is for reference purposes and is not internationally recognized.
CVSS:
9.8 |
EPSS:
95.15%
Mitre ATT&CK Technical v15.1
T1583.004 – Server
T1592.003 – Firmware
T1584.004 – Server
T1053.002 – At
Technical Analysis & Mitigation Measures
Reference Links
Vendor - Produce - Version
Disclaimer
The content on this website is automatically sourced from external websites such as the National Vulnerability Database (NVD), GitHub, and other security-related sources. This content is for reference purposes only, and we are not responsible for the accuracy or integrity of the information linked or displayed from these sources.