CVE-2021-20034

🗓️ 27 Sep 2021 18:15:08Reported by [email protected]Type

Improper access control vulnerability in SMA100 allows remote attacker to delete arbitrary fil

Reporter	Title	Published	Views	Family All 18
0day.today	SonicWall SMA 10.2.1.0-17sv - Password Reset Vulnerability	20 Oct 202100:00	–	zdt
ATTACKERKB	CVE-2021-20034	27 Sep 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the SONICWALL Ethernet switch control interface of the SMA 100 series allows a intruder to alter the device’s configuration to the factory settings and trigger a failure in the target system’s service.	13 Oct 202100:00	–	bdu_fstec
Circl	CVE-2021-20034	24 Sep 202117:46	–	circl
CNNVD	Sonicwall SMA100 路径遍历漏洞	24 Sep 202100:00	–	cnnvd
CVE	CVE-2021-20034	27 Sep 202117:20	–	cve
Cvelist	CVE-2021-20034	27 Sep 202117:20	–	cvelist
Exploit DB	SonicWall SMA 10.2.1.0-17sv - Password Reset	20 Oct 202100:00	–	exploitdb
EUVD	EUVD-2021-7497	3 Oct 202520:07	–	euvd
Malwarebytes	SonicWall warns users to patch critical vulnerability “as soon as possible”	24 Sep 202111:09	–	malwarebytes

NVD

Node

sonicwall sma_200_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_200_firmwareRange10.2.1.0–10.2.1.0-17sv

AND

Node

sonicwall sma_210_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_210_firmwareRange10.2.1.0–10.2.1.0-17sv

AND

Node

sonicwall sma_400_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_400_firmwareRange10.2.1.0–10.2.1.0-17sv

AND

Node

sonicwall sma_410_firmwareRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_410_firmwareRange10.2.1.0–10.2.1.0-17sv

AND

Node

sonicwall sma_500vRange≤9.0.0.10-28sv

sonicwall sma_500vRange10.2.0.0–10.2.0.7-34sv

sonicwall sma_500vRange10.2.1.0–10.2.1.0-17sv

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021

17 Jun 2026 03:33Current

CVSS 26.4

CVSS 3.19.1

EPSS0.80701