CVE-2021-20038
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
YesDecision
Descriptions
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.
Una vulnerabilidad de desbordamiento de búfer en la región Stack de la memoria en las variables de entorno del módulo mod_cgi del servidor httpd de SMA100 permite a un atacante remoto no autenticado ejecutar potencialmente código como usuario "nobody" en el dispositivo. Esta vulnerabilidad afecta a los dispositivos SMA 200, 210, 400, 410 y 500v con firmware versiones 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv y versiones anteriores
SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-12-17 CVE Reserved
- 2021-12-08 CVE Published
- 2022-01-28 Exploited in Wild
- 2022-02-11 KEV Due Date
- 2022-08-08 First Exploit
- 2024-08-03 CVE Updated
- 2024-10-30 EPSS Updated
CWE
- CWE-121: Stack-based Buffer Overflow
- CWE-787: Out-of-bounds Write
CAPEC
References (4)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026 | 2022-05-13 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sonicwall Search vendor "Sonicwall" | Sma 200 Firmware Search vendor "Sonicwall" for product "Sma 200 Firmware" | 10.2.0.8-37sv Search vendor "Sonicwall" for product "Sma 200 Firmware" and version "10.2.0.8-37sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 200 Search vendor "Sonicwall" for product "Sma 200" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 200 Firmware Search vendor "Sonicwall" for product "Sma 200 Firmware" | 10.2.1.1-19sv Search vendor "Sonicwall" for product "Sma 200 Firmware" and version "10.2.1.1-19sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 200 Search vendor "Sonicwall" for product "Sma 200" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 200 Firmware Search vendor "Sonicwall" for product "Sma 200 Firmware" | 10.2.1.2-24sv Search vendor "Sonicwall" for product "Sma 200 Firmware" and version "10.2.1.2-24sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 200 Search vendor "Sonicwall" for product "Sma 200" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 210 Firmware Search vendor "Sonicwall" for product "Sma 210 Firmware" | 10.2.0.8-37sv Search vendor "Sonicwall" for product "Sma 210 Firmware" and version "10.2.0.8-37sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 210 Search vendor "Sonicwall" for product "Sma 210" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 210 Firmware Search vendor "Sonicwall" for product "Sma 210 Firmware" | 10.2.1.1-19sv Search vendor "Sonicwall" for product "Sma 210 Firmware" and version "10.2.1.1-19sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 210 Search vendor "Sonicwall" for product "Sma 210" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 210 Firmware Search vendor "Sonicwall" for product "Sma 210 Firmware" | 10.2.1.2-24sv Search vendor "Sonicwall" for product "Sma 210 Firmware" and version "10.2.1.2-24sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 210 Search vendor "Sonicwall" for product "Sma 210" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 410 Firmware Search vendor "Sonicwall" for product "Sma 410 Firmware" | 10.2.0.8-37sv Search vendor "Sonicwall" for product "Sma 410 Firmware" and version "10.2.0.8-37sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 410 Search vendor "Sonicwall" for product "Sma 410" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 410 Firmware Search vendor "Sonicwall" for product "Sma 410 Firmware" | 10.2.1.1-19sv Search vendor "Sonicwall" for product "Sma 410 Firmware" and version "10.2.1.1-19sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 410 Search vendor "Sonicwall" for product "Sma 410" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 410 Firmware Search vendor "Sonicwall" for product "Sma 410 Firmware" | 10.2.1.2-24sv Search vendor "Sonicwall" for product "Sma 410 Firmware" and version "10.2.1.2-24sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 410 Search vendor "Sonicwall" for product "Sma 410" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 400 Firmware Search vendor "Sonicwall" for product "Sma 400 Firmware" | 10.2.0.8-37sv Search vendor "Sonicwall" for product "Sma 400 Firmware" and version "10.2.0.8-37sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 400 Search vendor "Sonicwall" for product "Sma 400" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 400 Firmware Search vendor "Sonicwall" for product "Sma 400 Firmware" | 10.2.1.1-19sv Search vendor "Sonicwall" for product "Sma 400 Firmware" and version "10.2.1.1-19sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 400 Search vendor "Sonicwall" for product "Sma 400" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 400 Firmware Search vendor "Sonicwall" for product "Sma 400 Firmware" | 10.2.1.2-24sv Search vendor "Sonicwall" for product "Sma 400 Firmware" and version "10.2.1.2-24sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 400 Search vendor "Sonicwall" for product "Sma 400" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 500v Firmware Search vendor "Sonicwall" for product "Sma 500v Firmware" | 10.2.0.8-37sv Search vendor "Sonicwall" for product "Sma 500v Firmware" and version "10.2.0.8-37sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 500v Search vendor "Sonicwall" for product "Sma 500v" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 500v Firmware Search vendor "Sonicwall" for product "Sma 500v Firmware" | 10.2.1.1-19sv Search vendor "Sonicwall" for product "Sma 500v Firmware" and version "10.2.1.1-19sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 500v Search vendor "Sonicwall" for product "Sma 500v" | - | - |
Safe
|
Sonicwall Search vendor "Sonicwall" | Sma 500v Firmware Search vendor "Sonicwall" for product "Sma 500v Firmware" | 10.2.1.2-24sv Search vendor "Sonicwall" for product "Sma 500v Firmware" and version "10.2.1.2-24sv" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Sma 500v Search vendor "Sonicwall" for product "Sma 500v" | - | - |
Safe
|