CVE-2021-20016criticalunder attackransomwareCWE-89

CVE-2021-20016: critical vulnerability in SonicWall SMA100

Published · Updated

Follow this CVE+ Monitor SMA100+ Monitor SSLVPN SMA100

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 40%
from disclosure to weapon
Published on NVDFeb 3
CISA KEV+273d
Action required by CISAfederal deadline: 2021-11-17

Apply updates per vendor instructions.

In short

A SQL injection flaw in SonicWall SSLVPN SMA100 allows an attacker without login credentials to inject malicious SQL commands and steal usernames, passwords, and session data. This is critical because attackers can compromise user accounts and gain unauthorized access to the VPN system.

Technical detail

A SQL injection vulnerability (CWE-89) in SonicWall SSLVPN SMA100 build 10.x permits unauthenticated remote attackers to execute arbitrary SQL queries via improper input sanitization, enabling extraction of sensitive data including credentials and session tokens. The attack requires no prior authentication and affects the core authentication and session management components.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SonicWall · SonicWall SMA100
Related CVEs — SonicWall SMA100

In the same product, most dangerous first.

CVE-2021-20038CRITICALCVE-2021-20038EPSS 99.9%KEVCVE-2021-20039HIGHCVE-2021-20039EPSS 78.7%CVE-2021-20044—CVE-2021-20044EPSS 40.1%CVE-2021-20045—CVE-2021-20045EPSS 25.2%CVE-2021-20040—CVE-2021-20040EPSS 25.1%CVE-2021-20043—CVE-2021-20043EPSS 23.3%