CVE-2021-20039

🗓️ 08 Dec 2021 09:55:21Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 193 Views🌐 WEB

Improper neutralization of special elements in the SMA100 management interface allows remote authenticated attacker to inject arbitrary commands

Reporter	Title	Published	Views	Family All 25
0day.today	SonicWall SMA 100 Series Authenticated Command Injection Exploit	13 Jan 202200:00	–	zdt
ATTACKERKB	CVE-2021-20038	8 Dec 202100:00	–	attackerkb
GithubExploit	Exploit for Out-of-bounds Write in Sonicwall Sma_200_Firmware	11 Jan 202202:25	–	githubexploit
Circl	CVE-2021-20039	8 Dec 202112:23	–	circl
CNNVD	Sonicwall SMA100 操作系统操作系统命令注入漏洞	7 Dec 202100:00	–	cnnvd
Check Point Advisories	SonicWall SMA 100 Command Injection (CVE-2021-20039)	9 Jun 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-20039	8 Dec 202109:55	–	cvelist
Metasploit	SonicWall SMA 100 Series Authenticated Command Injection	17 Jan 202217:42	–	metasploit
NCSC	Vulnerabilities fixed in SonicWall SMA100 series	8 Dec 202100:00	–	ncsc
NVD	CVE-2021-20039	8 Dec 202110:15	–	nvd

NVD

Vulners

Node

sonicwall sma_200_firmwareMatch9.0.0.11-31sv

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareMatch9.0.0.11-31sv

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareMatch9.0.0.11-31sv

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_400_firmwareMatch9.0.0.11-31sv

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_500v_firmwareMatch9.0.0.11-31sv

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.11-31sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.1-19sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026
packetstormsecurity	www.packetstormsecurity.com/files/165563/SonicWall-SMA-100-Series-Authenticated-Command-Injection.html
attackerkb	www.attackerkb.com/topics/9szJhq46lw/cve-2021-20039/rapid7-analysis

Parameter	Position	Path	Description	CWE
CERT	request body	/cgi-bin/viewcert	Authenticated command injection via CERT field in viewcert (SonicWall SMA-100).	CWE-78

05 Sep 2025 18:15Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 29

EPSS0.82461

SSVC