CVE-2021-20041

🗓️ 08 Dec 2021 09:55:24Reported by sonicwallType

An unauthenticated adversary can consume all of device's CPU due to crafted HTTP requests to SMA100 /fileshare/sonicfiles/sonicfiles

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-20041	8 Dec 202112:23	–	circl
CNNVD	SonicWall SMA100安全漏洞	7 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-20041	8 Dec 202109:55	–	cvelist
EUVD	EUVD-2021-7504	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in SonicWall SMA100 series	8 Dec 202100:00	–	ncsc
NVD	CVE-2021-20041	8 Dec 202110:15	–	nvd
Prion	Design/Logic Flaw	8 Dec 202110:15	–	prion
Rapid7 Blog	Patch Now: SonicWall Fixes Multiple Vulnerabilities in SMA 100 Devices	8 Dec 202118:57	–	rapid7blog
Rapid7 Blog	CVE-2021-20038..42: SonicWall SMA 100 Multiple Vulnerabilities (FIXED)	11 Jan 202214:00	–	rapid7blog
RedhatCVE	CVE-2021-20041	22 May 202519:05	–	redhatcve

NVD

Vulners

Node

sonicwall sma_200_firmwareMatch9.0.0.11-31sv

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareMatch9.0.0.11-31sv

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareMatch9.0.0.11-31sv

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_400_firmwareMatch9.0.0.11-31sv

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_500v_firmwareMatch9.0.0.11-31sv

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.11-31sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.1-19sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026

21 Nov 2024 05:45Current

8.5High risk

Vulners AI Score8.5

CVSS 3.17.5

CVSS 27.8

EPSS0.01317

CWE-835