CVE-2021-20016

🗓️ 03 Feb 2021 20:35:14Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 1385 Views

SQL-Injection vulnerability in SonicWall SSLVPN SMA100, allows remote attacker access to sensitive inf

Reporter	Title	Published	Views	Family All 28
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ATTACKERKB	SonicWall SMA 100 Series 10.x Firmware Zero-Day Vulnerability	3 Feb 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-20016	4 Feb 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the implementation of the SSL VPN micro-programming software for network interfaces of the SMA 100 series, which allows a intruder to gain unauthorized access to protected information.	13 May 202100:00	–	bdu_fstec
Circl	CVE-2021-20016	4 Feb 202112:34	–	circl
CISA KEV Catalog	SonicWall SSLVPN SMA100 SQL Injection Vulnerability	3 Nov 202100:00	–	cisa_kev
CNNVD	Sonicwall SMA100 SQL Injection Vulnerability	4 Feb 202100:00	–	cnnvd
Check Point Advisories	SonicWall SSLVPN SMA100 Authentication Bypass (CVE-2021-20016)	17 Apr 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-20016	3 Feb 202120:35	–	cvelist

NVD

Vulners

Node

sonicwall sma_100_firmwareRange10.0.0.0–10.2.0.5-d-29sv

AND

sonicwall sma_100Match-

Node

sonicwall sma_200_firmwareMatch-

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareMatch-

AND

sonicwall sma_210Match-

Node

sonicwall sma_400_firmwareMatch-

AND

sonicwall sma_400Match-

Node

sonicwall sma_410_firmwareMatch-

AND

sonicwall sma_410Match-

Node

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "SMA100 build version 10.x"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

31 Oct 2025 15:56Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.40038

SSVC