CVE-2021-20016

🗓️ 03 Feb 2021 20:35:14Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 1484 Views

SQL-Injection vulnerability in SonicWall SSLVPN SMA100, allows remote attacker access to sensitive inf

Reporter	Title	Published	Views	Family All 30
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
attackerkb	SonicWall SMA 100 Series 10.x Firmware Zero-Day Vulnerability	3 Feb 202100:00	–	attackerkb
attackerkb	CVE-2021-20016	4 Feb 202100:00	–	attackerkb
BDU FSTEC	SMA 100 series SSL VPN Unauthorized Access	13 May 202100:00	–	bdu_fstec
Circl	CVE-2021-20016	4 Feb 202112:34	–	circl
CISA KEV Catalog	SonicWall SSLVPN SMA100 SQL Injection Vulnerability	3 Nov 202100:00	–	cisa_kev
CNNVD	Sonicwall SMA100 SQL Injection Vulnerability	4 Feb 202100:00	–	cnnvd
Check Point Advisories	SonicWall SSLVPN SMA100 Authentication Bypass (CVE-2021-20016)	17 Apr 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-20016	3 Feb 202120:35	–	cvelist

NVD

Vulners

Node

AND

sonicwall sma_100_firmwareRange10.0.0.0–10.2.0.5-d-29sv

sonicwall sma_100Match-

Node

AND

sonicwall sma_200_firmwareMatch-

sonicwall sma_200Match-

Node

AND

sonicwall sma_210_firmwareMatch-

sonicwall sma_210Match-

Node

AND

sonicwall sma_400_firmwareMatch-

sonicwall sma_400Match-

Node

AND

sonicwall sma_410_firmwareMatch-

sonicwall sma_410Match-

Node

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SMA100 build version 10.x"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

12 Aug 2026 05:17Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

CVSS 3.19.8

EPSS0.40038

SSVC