CVE-2021-20016

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

Sma 100 Firmware

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

4. Feb 2021

Ausgewertete Quellen

• Hersteller
  https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20016
• CISA
  SonicWall SSLVPN SMA100 SQL Injection Vulnerability
• NVD
  CVE-2021-20016