sma_200_firmware 漏洞

严重CVE-2021-200382021/12/08

SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.

sma_200_firmwarePoC 已收录RCE

CVSS9.8EPSS 94.3%

严重CVE-2021-200162021/02/04

CVE-2021-20016

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

sma_100_firmware sma_200_firmware

CVSS9.8EPSS 80.4%

sma_200_firmware

关联漏洞

SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution

CVE-2021-20016