Lucene search
+L

7 matches found

attackerkb
attackerkb
•added 2021/12/08 10:15 a.m.•9 views

CVE-2021-20041

An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

7.8CVSS7.8AI score0.21197EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/08 10:15 a.m.•14 views

CVE-2021-20045

A buffer overflow vulnerability in SMA100 sonicfiles RACCOPYTO RacNumber 36 method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

9.8CVSS8.5AI score0.25208EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/08 10:15 a.m.•36 views

CVE-2021-20045

A buffer overflow vulnerability in SMA100 sonicfiles RACCOPYTO RacNumber 36 method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

9.8CVSS0.25208EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/08 10:15 a.m.•32 views

Buffer overflow

A buffer overflow vulnerability in SMA100 sonicfiles RACCOPYTO RacNumber 36 method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

7.5CVSS9.7AI score0.25208EPSS
SaveExploits0References1Affected Software5
CVE
CVE
•added 2021/12/08 9:55 a.m.•87 views

CVE-2021-20045

CVE-2021-20045 is a buffer overflow vulnerability in SonicWall SMA100 series, specifically the sonicfiles RAC_COPY_TO (RacNumber 36) method, that allows a remote unauthenticated attacker to execute code as the nobody user on SMA 200, 210, 400, 410 and 500v appliances. Connected sources confirm af...

9.8CVSS9.7AI score0.25208EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/08 9:55 a.m.•41 views

CVE-2021-20045

A buffer overflow vulnerability in SMA100 sonicfiles RACCOPYTO RacNumber 36 method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

10AI score0.25208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/08 12:00 a.m.•8 views

PT-2021-13737

Name of the Vulnerable Software and Affected Versions: SMA 200 SMA 210 SMA 400 SMA 410 SMA 500v Description: An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to "/fileshare/sonicfiles/sonicfiles" resulting in a loop with unreachable exi...

7.8CVSS0.21197EPSS
SaveExploits0References6
Rows per page
Query Builder