VulnerabilityModified

CVE-2021-20044

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance.

HIGH 8.8EPSS 40.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 40.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 40.07% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-78
Affected: sonicwall/sma 200 firmware · sonicwall/sma 210 firmware · sonicwall/sma 410 firmware · sonicwall/sma 400 firmware · sonicwall/sma 500v firmware
Source: PSIRT@sonicwall.com

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.