Lucene search
+L

2 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/03/30 12:00 a.m.•5 views

VulnCheck KEV: CVE-2021-20039

Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

9CVSS7.6AI score0.78746EPSS
SaveIn wildExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•2 views

CVE-2021-20039: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

9CVSS6.1AI score0.78746EPSS
SaveExploits4References4
Rows per page
Query Builder