CVE-2021-20028criticalunder attackransomwareCWE-89

CVE-2021-20028: critical vulnerability in SonicWall SRA/SMA100

Published · Updated

Follow this CVE+ Monitor SonicWall SRA/SMA100+ Monitor Secure Remote Access

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 30%
from disclosure to weapon
Published on NVDAug 4
CISA KEV+236d
Action required by CISAfederal deadline: 2022-04-18

The impacted product is end-of-life and should be disconnected if still in use.

In short

A SQL injection vulnerability in Secure Remote Access (SRA) appliances allows attackers to execute malicious SQL commands directly on the database without proper validation, potentially compromising sensitive data or system control.

Technical detail

SQL injection flaw in SRA 8.x and 9.0.0.9-26sv or earlier due to insufficient input sanitization in SQL query construction; remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, leading to unauthorized data access, modification, or deletion.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SonicWall · SonicWall SRA/SMA100
Related CVEs — SonicWall SRA/SMA100

In the same product, most dangerous first.

CVE-2022-22273—CVE-2022-22273EPSS 1.9%CVE-2022-22279—CVE-2022-22279EPSS 1.1%