CVE-2021-20034

2021-09-2717:20:10

CWE-284

sonicwall

www.cve.org

vulnerability

access control

sma100

remote attacker

delete file

path traversal

reboot

AI Score

9.5

Confidence

High

EPSS

0.641

Percentile

97.9%

JSON

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.

CNA Affected

[
  {
    "product": "SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.10-28sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.0.7-34sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.0-17sv and earlier"
      }
    ]
  }
]