VulnerabilityModified

CVE-2021-20042

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.

CRITICAL 9.8EPSS 2.59%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 2.59% probability · 84th percentile
CISA KEV: Not listed
Weakness: CWE-441
Affected: sonicwall/sma 200 firmware · sonicwall/sma 210 firmware · sonicwall/sma 410 firmware · sonicwall/sma 400 firmware · sonicwall/sma 500v firmware
Source: PSIRT@sonicwall.com

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.