CVE-2021-20039

Sep 3, 2024

Published Date: 2021-12-08T10:15Z

Last Modified: 2022-04-01T15:27Z

CVSS Score: 8.8 (HIGH)

EPSS Score: 67.75%

Risk Score: 6.36 (HIGH)

Risk Score based on CVSS score and EPSS. This score is for reference purposes and is not internationally recognized.

CVSS: 8.8 | EPSS: 67.75%

NVD Links:

https://nvd.nist.gov/vuln/detail/CVE-2021-20039

Description: Improper neutralization of special elements in the SMA100 management interface ‘/cgi-bin/viewcert’ POST http method allows a remote authenticated attacker to inject arbitrary commands as a ‘nobody’ user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Mitre ATT&CK Technical v15.1

T1053.002 – At

Technical Analysis & Mitigation Measures

Reference Links

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026
http://packetstormsecurity.com/files/165563/SonicWall-SMA-100-Series-Authenticated-Command-Injection.html

Vendor - Produce - Version

Disclaimer

The content on this website is automatically sourced from external websites such as the National Vulnerability Database (NVD), GitHub, and other security-related sources. This content is for reference purposes only, and we are not responsible for the accuracy or integrity of the information linked or displayed from these sources.