CVE-2021-20038

🗓️ 08 Dec 2021 09:55:20Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1123 Views

Stack-based buffer overflow in SMA100 Apache httpd server's mod_cgi modul

Reporter	Title	Published	Views	Family All 39
0day.today	SonicWall SMA 100 Series Authenticated Command Injection Exploit	13 Jan 202200:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	8 Aug 202203:38	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	11 Jan 202202:25	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	8 Aug 202203:38	–	githubexploit
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities	9 Feb 202312:00	–	ics
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2021-20038	8 Dec 202100:00	–	attackerkb
Circl	CVE-2021-20038	8 Dec 202112:23	–	circl

NVD

Vulners

Node

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.1-19sv

sonicwall sma_200_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.1-19sv

sonicwall sma_210_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.1-19sv

sonicwall sma_410_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.1-19sv

sonicwall sma_400_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.1-19sv

sonicwall sma_500v_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.1-19sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
rapid7	www.rapid7.com/blog/post/2022/01/11/cve-2021-20038-42-sonicwall-sma-100-multiple-vulnerabilities-fixed-2/
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026
github	www.github.com/jbaines-r7/badblood
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

31 Oct 2025 17:13Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.94292

SSVC

cve-2021-20038 apache httpd buffer overflow mod_cgi sma vulnerability security advisory