CVE-2021-20034: vulnerability in SonicWall SMA100
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 82%
from disclosure to weapon23 days
Published on NVDSep 27
1st PoC+23d
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Affected products
SonicWall · SMA100public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/50430unverifiedcve_referencepacketstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SonicWall SMA100
In the same product, most dangerous first.