Lucene search

[email protected]NVD:CVE-2021-20045

HistoryDec 08, 2021 - 10:15 a.m.

CVE-2021-20045

2021-12-0810:15:08

CWE-120

[email protected]

web.nvd.nist.gov

buffer overflow

sma100 sonicfiles

rac_copy_to method

remote code execution

'nobody' user

sma 200

sma 210

sma 400

sma 410

sma 500v

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

77.1%

JSON

A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the ‘nobody’ user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Affected configurations

Nvd

Node

sonicwallsma_200_firmwareMatch10.2.0.8-37sv

sonicwallsma_200_firmwareMatch10.2.1.1-19sv

AND

sonicwallsma_200Match-

Node

sonicwallsma_210_firmwareMatch10.2.0.8-37sv

sonicwallsma_210_firmwareMatch10.2.1.1-19sv

AND

sonicwallsma_210Match-

Node

sonicwallsma_410_firmwareMatch10.2.0.8-37sv

sonicwallsma_410_firmwareMatch10.2.1.1-19sv

AND

sonicwallsma_410Match-

Node

sonicwallsma_400_firmwareMatch10.2.0.8-37sv

sonicwallsma_400_firmwareMatch10.2.1.1-19sv

AND

sonicwallsma_400Match-

Node

sonicwallsma_500v_firmwareMatch10.2.0.8-37sv

sonicwallsma_500v_firmwareMatch10.2.1.1-19sv

AND

sonicwallsma_500vMatch-

VendorProductVersionCPE
sonicwallsma_200_firmware10.2.0.8-37svcpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*
sonicwallsma_200_firmware10.2.1.1-19svcpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*
sonicwallsma_200-cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*
sonicwallsma_210_firmware10.2.0.8-37svcpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*
sonicwallsma_210_firmware10.2.1.1-19svcpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*
sonicwallsma_210-cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*
sonicwallsma_410_firmware10.2.0.8-37svcpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*
sonicwallsma_410_firmware10.2.1.1-19svcpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*
sonicwallsma_410-cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*
sonicwallsma_400_firmware10.2.0.8-37svcpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sonicwall	sma_200_firmware	10.2.0.8-37sv	cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:::::::*
sonicwall	sma_200_firmware	10.2.1.1-19sv	cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:::::::*
sonicwall	sma_200	-	cpe:2.3:h:sonicwall:sma_200:-:::::::*
sonicwall	sma_210_firmware	10.2.0.8-37sv	cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:::::::*
sonicwall	sma_210_firmware	10.2.1.1-19sv	cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:::::::*
sonicwall	sma_210	-	cpe:2.3:h:sonicwall:sma_210:-:::::::*
sonicwall	sma_410_firmware	10.2.0.8-37sv	cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:::::::*
sonicwall	sma_410_firmware	10.2.1.1-19sv	cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:::::::*
sonicwall	sma_410	-	cpe:2.3:h:sonicwall:sma_410:-:::::::*
sonicwall	sma_400_firmware	10.2.0.8-37sv	cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:::::::*