CVE-2021-20035mediumunder attackCWE-78

CVE-2021-20035: medium-severity vulnerability in SonicWall SMA100

Published · Updated

Follow this CVE+ Monitor SMA100+ Monitor SMA100 Appliances

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Attendcvss 6.5epss 4.4%
from disclosure to weapon
Published on NVDSep 27
CISA KEV+1297d
Action required by CISAfederal deadline: 2025-05-07

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

The SMA100 management interface fails to properly filter user input, allowing authenticated users to inject system commands that execute with limited privileges, potentially causing service disruptions.

Technical detail

CWE-78 command injection vulnerability in SMA100 management interface lacks proper input sanitization, enabling authenticated attackers to inject arbitrary OS commands executed as 'nobody' user; requires valid authentication credentials and can result in denial-of-service conditions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
SonicWall · SMA100
Related CVEs — SonicWall SMA100

In the same product, most dangerous first.

CVE-2019-7481HIGHCVE-2019-7481EPSS 99.9%KEVCVE-2023-44221HIGHCVE-2023-44221EPSS 76.3%KEVCVE-2019-7483HIGHCVE-2019-7483EPSS 4.0%KEVCVE-2021-20034—CVE-2021-20034EPSS 81.8%CVE-2025-32821HIGHCVE-2025-32821EPSS 23.5%CVE-2022-1703—CVE-2022-1703EPSS 13.0%