CVE-2021-20050

🗓️ 23 Dec 2021 01:20:11Reported by sonicwallType

Improper access control in SMA100 series allows unauthorized access to management APIs

Reporter	Title	Published	Views	Family All 9
CNNVD	SonicWALL SMA100 安全漏洞	21 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-20050	23 Dec 202101:20	–	cvelist
EUVD	EUVD-2021-7513	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in SonicWall SMA100 series	22 Dec 202100:00	–	ncsc
NVD	CVE-2021-20050	23 Dec 202102:15	–	nvd
Prion	Improper access control	23 Dec 202102:15	–	prion
Positive Technologies	PT-2021-13743 · Unknown · Sma 100 Series	23 Dec 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-20050	22 May 202519:05	–	redhatcve
SonicWall	SMA100 Improper Access Control Vulnerability allowed restricted management APIs accessible	21 Dec 202111:36	–	sonicwall

NVD

Vulners

Node

sonicwall sma_100_firmwareRange<10.0.0.0

sonicwall sma_100_firmwareMatch10.2.0.8-37sv

sonicwall sma_100_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma100Match-

Node

sonicwall sma_200_firmwareRange<10.0.0.0

sonicwall sma_200_firmwareMatch10.2.0.8-37sv

sonicwall sma_200_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma200Match-

Node

sonicwall sma_210_firmwareRange<10.0.0.0

sonicwall sma_210_firmwareMatch10.2.0.8-37sv

sonicwall sma_210_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma210Match-

Node

sonicwall sma_400_firmwareRange<10.0.0.0

sonicwall sma_400_firmwareMatch10.2.0.8-37sv

sonicwall sma_400_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma400Match-

Node

sonicwall sma_410_firmwareRange<10.0.0.0

sonicwall sma_410_firmwareMatch10.2.0.8-37sv

sonicwall sma_410_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma410Match-

Node

sonicwall sma_500v_firmwareRange<10.0.0.0

sonicwall sma_500v_firmwareMatch10.2.0.8-37sv

sonicwall sma_500v_firmwareMatch10.2.1.2-24sv

AND

sonicwall sma500vMatch-

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0031

21 Nov 2024 05:45Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 3.17.5

EPSS0.00175

CWE-284