365 matches found
SonicWall SMA100 post-authentication configuration export to the a specified email address
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier. CVE: CVE-2021-20018 Last updated: March 13, 2021, 1:19 a.m...
SonicWall SMA100 post-authenticated remote command injection
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier. CVE: CVE-2021-20017 Last updated: March 13, 2021, 1:04 a.m...
CVE-2021-20017: Improper Neutralization of Special Elements used in an OS Command
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...
CVE-2021-20018: Exposure of Sensitive Information to an Unauthorized Actor
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...
PT-2021-13725
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions 10.2.0.5 and earlier Description: A post-authenticated command injection issue allows an authenticated attacker to execute OS commands as a 'nobody' user. Recommendations: For SonicWall SMA100 versions 10.2.0.5 and...
PT-2021-13726
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions 10.2.0.5 and earlier Description: A post-authenticated issue in SonicWall SMA100 allows an attacker to export the configuration file to a specified email address. Recommendations: For SonicWall SMA100 versions 10.2.0...
CVE-2021-20016
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x...
CVE-2021-20016
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x...
Sql injection
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x...
Sonicwall SMA100 SQL Injection Vulnerability
The Sonicwall SMA100 is a secure access gateway appliance from Sonicwall, Inc. A SQL injection vulnerability exists in the SonicWall SSLVPN SMA100 product, which allows a remote, unauthenticated attacker to execute a SQL query to access usernames passwords and other session-related information...
CVE-2021-20016: Improper Neutralization of Special Elements used in an SQL Command
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x...
CVE-2021-20016
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x. Recent assessments: wvu-r7 at February 05, 20...
Serious vulnerability fixed in SonicWall SMA100 Series
A vulnerability has been fixed in the SonicWall SMA100 series. The vulnerability allows an unauthenticated remote malicious person able to obtain login credentials to the system by executing an SQL injection. SonicWall has released updates to fix the vulnerability. fix. More information can be...
CVE-2021-20016
CVE-2021-20016 is a SQL Injection vulnerability in SonicWall SSLVPN SMA100 (build 10.x). The description confirms remote unauthenticated access to usernames/passwords and session data. Connected sources reiterate SonicWall SSLVPN/SMA100 and CVE mention but provide no additional technical specific...
CVE-2021-20016
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x...
CVE-2021-20016
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x...
Confirmed Zero-day vulnerability in the SonicWall SMA100 build version 10.x
A vulnerability resulting in improper SQL command neutralization in the SonicWall SSLVPN SMA100 product allows remote exploitation for credential access by an unauthenticated attacker. This vulnerability impacts SMA100 build version 10.x. CVE: CVE-2021-20016 Last updated: Feb. 3, 2021, 9:11 p.m...
Sonicwall SMA100 Operating System Command Injection Vulnerability
The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A command injection vulnerability exists in the SonicWall SMA100 appliance that allows an authenticated administrative user to perform OS command injection using HTTP POST parameters. No detailed vulnerability details are...
CVE-2020-5146
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier...
CVE-2020-5146
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier...