CVE-2021-20044: Improper Neutralization of Special Elements used in an OS Command

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

SonicWall SMA100 安全漏洞

The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A security vulnerability exists in the SonicWall SMA100 that could be exploited by an unauthenticated remote attacker to bypass firewall rules by using the SMA100 as an unexpected proxy or intermediate undetectable pro...

Sonicwall SMA100 操作系统操作系统命令注入漏洞

The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. An operating system command injection vulnerability exists in the SonicWall SMA100 management interface, which stems from an improper neutralization of special elements in the POST http method of /cgi-bin/viewcert. The...

VulnCheck KEV: CVE-2019-7481

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker...

SonicWall SMA100 SQL Injection Vulnerability

SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources...

CVE-2021-20035

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS...

CVE-2021-20034

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

CVE-2021-20034

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

CVE-2021-20034

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. Rapid7 Analysis Description On September 23, 2021, SonicWall published an...

Path traversal

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

CVE-2021-20035

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS...

CVE-2021-20035

Summary: CVE-2021-20035 affects SonicWall SMA100 appliances. The vulnerability is an OS command injection in the SMA100 management interface caused by improper input neutralization, enabling a remote authenticated attacker to inject arbitrary commands as the nobody user, potentially causing a DoS...

CVE-2021-20035

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS...

CVE-2021-20034

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

CVE-2021-20034

CVE-2021-20034 affects SonicWall SMA100 series appliances. The vulnerability is an improper access control that allows a remote, unauthenticated attacker to bypass path traversal checks and delete arbitrary files, potentially causing a reboot to factory defaults. Impacted products include SMA 100...

CVE-2021-20035

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a ‘nobody’ user which potentially leads to DoS. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2021-20034: Improper Access Control

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...

CVE-2021-20035: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS...

Sonicwall SMA100 路径遍历漏洞

The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. A path traversal vulnerability exists in the SonicWall SMA100 series that stems from improper access restrictions in the SMA 100 management interface. A remote, unauthenticated attacker could bypass the implemented path...