CVE-2021-20045

2021-12-0809:55:29

CWE-120

sonicwall

www.cve.org

buffer overflow

sma100

sonicfiles

rac_copy_to

remote code execution

vulnerability

sma 200

sma 210

sma 400

sma 410

sma 500v

AI Score

Confidence

High

EPSS

0.005

Percentile

77.1%

JSON

A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the ‘nobody’ user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

CNA Affected

[
  {
    "product": "SonicWall SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.0.8-37sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.1-19sv and earlier"
      },
      {
        "status": "affected",
        "version": "10.2.1.2-24sv and earlier"
      }
    ]
  }
]