CVE-2021-20039 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2021-20039

Analyzed

More Info Official Page

Source-PSIRT@sonicwall.com

Published At-08 Dec, 2021 | 10:15

Updated At-01 Apr, 2022 | 15:27

Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C

CPE Matches

cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*

>>sma_200_firmware>>9.0.0.11-31sv

cpe:2.3:o:sonicwall:sma_200_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*

>>sma_200_firmware>>10.2.0.8-37sv

cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*

>>sma_200_firmware>>10.2.1.1-19sv

cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*

>>sma_210_firmware>>9.0.0.11-31sv

cpe:2.3:o:sonicwall:sma_210_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*

>>sma_210_firmware>>10.2.0.8-37sv

cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*

>>sma_210_firmware>>10.2.1.1-19sv

cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*

>>sma_410_firmware>>9.0.0.11-31sv

cpe:2.3:o:sonicwall:sma_410_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*

>>sma_410_firmware>>10.2.0.8-37sv

cpe:2.3:o:sonicwall:sma_410_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*

>>sma_410_firmware>>10.2.1.1-19sv

cpe:2.3:o:sonicwall:sma_410_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*

>>sma_400_firmware>>9.0.0.11-31sv

cpe:2.3:o:sonicwall:sma_400_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*

>>sma_400_firmware>>10.2.0.8-37sv

cpe:2.3:o:sonicwall:sma_400_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*

>>sma_400_firmware>>10.2.1.1-19sv

cpe:2.3:o:sonicwall:sma_400_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*

cpe:2.3:h:sonicwall:sma_500v:-:*:*:*:*:*:*:*

>>sma_500v_firmware>>9.0.0.11-31sv

cpe:2.3:o:sonicwall:sma_500v_firmware:9.0.0.11-31sv:*:*:*:*:*:*:*

>>sma_500v_firmware>>10.2.0.8-37sv

cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.0.8-37sv:*:*:*:*:*:*:*

>>sma_500v_firmware>>10.2.1.1-19sv

cpe:2.3:o:sonicwall:sma_500v_firmware:10.2.1.1-19sv:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-78	Primary	nvd@nist.gov
CWE-78	Secondary	PSIRT@sonicwall.com

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/165563/SonicWall-SMA-100-Series-Authenticated-Command-Injection.html	PSIRT@sonicwall.com	Exploit Third Party Advisory VDB Entry
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026	PSIRT@sonicwall.com	Vendor Advisory