CVE-2021-20028

🗓️ 04 Aug 2021 19:10:09Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1027 Views

Improper neutralization of a SQL Command leading to SQL Injection vulnerability in end-of-life SRA product

Reporter	Title	Published	Views	Family All 17
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2021-20028	4 Aug 202100:00	–	attackerkb
Circl	CVE-2021-20028	4 Aug 202123:23	–	circl
CISA KEV Catalog	SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability	28 Mar 202200:00	–	cisa_kev
CNNVD	Claroty Secure Remote Access SQL注入漏洞	4 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-20028	4 Aug 202119:10	–	cvelist
Krebs on Security	Wazawaka Goes Waka Waka	14 Feb 202218:22	–	krebs
NVD	CVE-2021-20028	4 Aug 202119:15	–	nvd
OSV	CVE-2021-20028	4 Aug 202119:15	–	osv
Prion	Sql injection	4 Aug 202119:15	–	prion

NVD

Vulners

Node

sonicwall sma_210_firmwareRange8.0.0.0–9.0.0.10-28sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareRange8.0.0.0–9.0.0.10-28sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_500v_firmwareRange8.0.0.0–9.0.0.10-28sv

AND

sonicwall sma_500vMatch-

Node

sonicwall sra_4600_firmwareRange8.0.0.0–9.0.0.10-28sv

AND

sonicwall sra_4600Match-

Node

sonicwall sra_1600_firmwareRange8.0.0.0–9.0.0.10-28sv

AND

sonicwall sra_1600Match-

Node

sonicwall sra_va_firmwareRange8.0.0.0–9.0.0.10-28sv

AND

sonicwall sra_vaMatch-

[
  {
    "product": "SonicWall SRA/SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "8.x firmware"
      },
      {
        "status": "affected",
        "version": "9.0.0.9-26sv and earlier."
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

31 Oct 2025 17:13Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 3.19.8

EPSS0.808

SSVC