CVE-2021-20040

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

CVE-2021-20040

CVE-2021-20040 is a path-traversal vulnerability in SonicWall SMA 100 series (SMA 200/210/400/410/500v) upload function. The issue allows remote, unauthenticated attackers to write crafted content as the nobody user via the SMA’s web interface, specifically affecting endpoint logic that handles s...