CVE-2021-20040

🗓️ 08 Dec 2021 09:55:23Reported by sonicwallType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 74 Views

A relative path traversal vulnerability in SMA100 upload function allows remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-20040	8 Dec 202112:23	–	circl
CNNVD	Sonicwall SMA100 路径遍历漏洞	7 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-20040	8 Dec 202109:55	–	cvelist
EUVD	EUVD-2021-7503	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in SonicWall SMA100 series	8 Dec 202100:00	–	ncsc
NVD	CVE-2021-20040	8 Dec 202110:15	–	nvd
Prion	Path traversal	8 Dec 202110:15	–	prion
Rapid7 Blog	Patch Now: SonicWall Fixes Multiple Vulnerabilities in SMA 100 Devices	8 Dec 202118:57	–	rapid7blog
Rapid7 Blog	CVE-2021-20038..42: SonicWall SMA 100 Multiple Vulnerabilities (FIXED)	11 Jan 202214:00	–	rapid7blog
RedhatCVE	CVE-2021-20040	22 May 202519:05	–	redhatcve

NVD

Vulners

Node

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.1-19sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026

21 Nov 2024 05:45Current

8.5High risk

Vulners AI Score8.5

CVSS 25

CVSS 3.17.5

EPSS0.08808