CVE-2021-20042

🗓️ 08 Dec 2021 09:55:25Reported by sonicwallType

Unauthenticated remote attacker can use SMA 100 as unintended proxy to bypass firewall rules.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2021-20042	8 Dec 202112:23	–	circl
CNNVD	SonicWall SMA100 安全漏洞	7 Dec 202100:00	–	cnnvd
CNVD	SonicWall SMA100 has an unspecified vulnerability	14 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-20042	8 Dec 202109:55	–	cvelist
EUVD	EUVD-2021-7505	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in SonicWall SMA100 series	8 Dec 202100:00	–	ncsc
NVD	CVE-2021-20042	8 Dec 202110:15	–	nvd
OSV	CVE-2021-20042	8 Dec 202110:15	–	osv
Prion	Design/Logic Flaw	8 Dec 202110:15	–	prion
Positive Technologies	PT-2021-13738 · Sma 410 +5 · Sma 410 +5	8 Dec 202100:00	–	ptsecurity

NVD

Vulners

Node

sonicwall sma_200_firmwareMatch9.0.0.11-31sv

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareMatch9.0.0.11-31sv

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_410_firmwareMatch9.0.0.11-31sv

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_400_firmwareMatch9.0.0.11-31sv

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_500v_firmwareMatch9.0.0.11-31sv

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.1-19sv

AND

sonicwall sma_500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.11-31sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.1-19sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026

21 Nov 2024 05:45Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.00559

CWE-441