by Kastro
Paper/Archive/CVE-2021-20042

CVE-2021-20042

SonicWall SonicWall SMA100 — An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.

EPSS 4%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 89.7.897 × 2017.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Affected

ProductAffectedFixed inSource
SonicWall SMA1009.0.0.11-31sv and earlier–CNA
SonicWall SMA10010.2.0.8-37sv and earlier–CNA
SonicWall SMA10010.2.1.1-19sv and earlier–CNA
SonicWall SMA10010.2.1.2-24sv and earlier–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refpsirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026