Paper/Archive/CVE-2021-20016

CVE-2021-20016

SonicWall SonicWall SMA100 — SonicWall SSLVPN SMA100 SQL Injection Vulnerability

KEV · due 17 Nov ransomware use EPSS 40%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 98.6.986 × 2019.7 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

Affected

ProductAffectedFixed inSource

SonicWall SMA100SMA100 build version 10.x–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refpsirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20016 kevcisa.gov/known-exploited-vulnerabilities-catalog