CVE-2021-20034

🗓️ 27 Sep 2021 17:20:10Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 170 Views🌐 WEB

Improper access control vulnerability in SMA100 allows remote unauthenticated attacker to bypass path traversal checks and delete arbitrary file, potentially resulting in factory default settings reboot.

Reporter	Title	Published	Views	Family All 20
zdt	SonicWall SMA 10.2.1.0-17sv - Password Reset Vulnerability	20 Oct 202100:00	–	zdt
attackerkb	CVE-2021-20034	27 Sep 202118:15	–	attackerkb
BDU FSTEC	SONICWALL Ethernet switch control interface Factory Configuration Failure	13 Oct 202100:00	–	bdu_fstec
Circl	CVE-2021-20034	24 Sep 202117:46	–	circl
CNNVD	Sonicwall SMA100 路径遍历漏洞	24 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-20034	27 Sep 202117:20	–	cvelist
Exploit DB	SonicWall SMA 10.2.1.0-17sv - Password Reset	20 Oct 202100:00	–	exploitdb
EUVD	EUVD-2021-7497	3 Oct 202520:07	–	euvd
Malwarebytes	SonicWall warns users to patch critical vulnerability “as soon as possible”	24 Sep 202111:09	–	malwarebytes
NCSC	Vulnerabilities fixed in SonicWall SMA100 series	24 Sep 202100:00	–	ncsc

NVD

Vulners

Node

AND

sonicwall sma_200_firmwareRange≤9.0.0.10-28sv

sonicwall sma_200_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_200_firmwareRange10.2.1.0–10.2.1.0-17sv

sonicwall sma_200Match-

Node

AND

sonicwall sma_210_firmwareRange≤9.0.0.10-28sv

sonicwall sma_210_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_210_firmwareRange10.2.1.0–10.2.1.0-17sv

sonicwall sma_210Match-

Node

AND

sonicwall sma_400_firmwareRange≤9.0.0.10-28sv

sonicwall sma_400_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_400_firmwareRange10.2.1.0–10.2.1.0-17sv

sonicwall sma_400Match-

Node

AND

sonicwall sma_410_firmwareRange≤9.0.0.10-28sv

sonicwall sma_410_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_410_firmwareRange10.2.1.0–10.2.1.0-17sv

sonicwall sma_410Match-

Node

sonicwall sma_500vRange≤9.0.0.10-28sv

sonicwall sma_500vRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_500vRange10.2.1.0–10.2.1.0-17sv

[
  {
    "product": "SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.10-28sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.0.7-34sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.0-17sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021
packetstormsecurity	www.packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html

Parameter	Position	Path	Description	CWE
hdl	query param	/cgi-bin/handleWAFRedirect	Path traversal via hdl parameter to handleWAFRedirect enabling access to an arbitrary file (persist.db), potentially causing a reboot to factory defaults.	CWE-22, CWE-284

17 Jun 2026 03:33Current

9.2Critical risk

Vulners AI Score9.2

CVSS 26.4

CVSS 3.19.1

EPSS0.81007