Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-20017

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA1

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sonicwall

Description

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall SMA100

  • 10.2.0.5 and earlieraffected

References