CVE-2021-20017 | BDVDB-2026-150431 Detail

SonicWallSMA100

Description#

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004

Exploit#

No public exploit known

History#

Version 12021-03-13Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.