CVE-2021-20017

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...

CVE-2021-20017

CVE-2021-20017 describes a post‑authenticated command injection in SonicWall SMA100 appliances, affecting versions up to 10.2.0.5 and earlier. An authenticated attacker can run OS commands as the nobody user. The condition is post‑auth and does not require user interaction. Public references in t...

SonicWall SMA100 post-authenticated remote command injection

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier. CVE: CVE-2021-20017 Last updated: March 13, 2021, 1:04 a.m...