Sonicwall SMA100 缓冲区错误漏洞

🗓️ 07 Dec 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

Unauthenticated attacker can execute code as nobody on SonicWall SMA100 via buffer error in mod_cgi.

Reporter	Title	Published	Views	Family All 40
0day.today	SonicWall SMA 100 Series Authenticated Command Injection Exploit	13 Jan 202200:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	8 Aug 202203:38	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	11 Jan 202202:25	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	8 Aug 202203:38	–	githubexploit
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities	9 Feb 202312:00	–	ics
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2021-20038	8 Dec 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the Apache mod_cgi module for HTTP servers in the SonicWall network device software for the SMA series (SMA 100, SMA 200, SMA 210, SMA 400, SMA 410, and SMA 500vl) allows attackers to execute arbitrary code.	12 Jan 202200:00	–	bdu_fstec

Source	Link
rapid7	www.rapid7.com/blog/post/2022/01/11/cve-2021-20038-42-sonicwall-sma-100-multiple-vulnerabilities-fixed-2/
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026
github	www.github.com/jbaines-r7/badblood
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-20038
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021120713

23 May 2026 00:00Current

9High risk

Vulners AI Score9

CVSS 27.5

CVSS 3.19.8

EPSS0.94292

SSVC

sonicwall buffer error mod cgi environment variable apache httpd unauthenticated access remote code execution nobody user affected devices firmware versions 10.2.0.8-37sv firmware versions 10.2.1.1-19sv firmware versions 10.2.1.2-24sv