Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-20035

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentia

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sonicwall

Description

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SonicWall SMA100

  • 9.0.0.10-28sv and earlieraffected
  • 10.2.0.7-34sv and earlieraffected
  • 10.2.1.0-17sv and earlieraffected

References