Lucene search
SonicwallCVELIST:CVE-2021-20049HistoryDec 23, 2021 - 1:20 a.m.
CVE-2021-20049
2021-12-2301:20:09
CWE-204
sonicwall
www.cve.org
3
sonicwall
sma100
vulnerability
remote attacker
username enumeration
api
EPSS
0.003
Percentile
66.8%
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.1.2-24sv, 10.2.0.8-37sv and earlier 10.x versions.
CNA Affected
[
{
"product": "SonicWall SMA100",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "10.2.0.8-37sv and earlier"
},
{
"status": "affected",
"version": "10.2.1.2-24sv and earlier"
}
]
}
]Related
cnvd
cnvd
SonicWall SMA100 Information Disclosure Vulnerability
2021-12-23 00:00:00
nvd
nvd
CVE-2021-20049
2021-12-23 02:15:06
cve
cve
CVE-2021-20049
2021-12-23 02:15:06
prion
prion
Code injection
2021-12-23 02:15:00