CVE-2021-20040

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

CVE-2021-20040

creationtimestamp| type| source ---|---|--- 2021-12-08 12:23:44+00:00| seen| https://t.me/cibsecurity/33567 2021-12-09 11:10:00+00:00| seen| https://t.me/truesecator/2424 2025-08-31 03:01:09+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2021-20040

CVE-2021-20040 is a path-traversal vulnerability in SonicWall SMA 100 series (SMA 200/210/400/410/500v) upload function. The issue allows remote, unauthenticated attackers to write crafted content as the nobody user via the SMA’s web interface, specifically affecting endpoint logic that handles s...