CVE-2021-20049

🗓️ 23 Dec 2021 01:20:09Reported by sonicwallType

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform username enumeration

Reporter	Title	Published	Views	Family All 9
CNNVD	Sonicwall SMA100 信息泄露漏洞	21 Dec 202100:00	–	cnnvd
CNVD	SonicWall SMA100 Information Disclosure Vulnerability	23 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-20049	23 Dec 202101:20	–	cvelist
EUVD	EUVD-2021-7512	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20049	23 Dec 202102:15	–	nvd
OSV	CVE-2021-20049	23 Dec 202102:15	–	osv
Prion	Code injection	23 Dec 202102:15	–	prion
RedhatCVE	CVE-2021-20049	22 May 202518:13	–	redhatcve
SonicWall	SonicWall SMA100 API username enumeration vulnerability	21 Dec 202111:24	–	sonicwall

NVD

Vulners

Node

sonicwall sma_100_firmwareRange<10.0.0.0

sonicwall sma_100_firmwareMatch10.2.0.8-37sv

sonicwall sma_100_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma100Match-

Node

sonicwall sma_200_firmwareRange<10.0.0.0

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma200Match-

Node

sonicwall sma_210_firmwareRange<10.0.0.0

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma210Match-

Node

sonicwall sma_400_firmwareRange<10.0.0.0

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma400Match-

Node

sonicwall sma_410_firmwareRange<10.0.0.0

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma410Match-

Node

sonicwall sma_500v_firmwareRange<10.0.0.0

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0030

21 Nov 2024 05:45Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.00334