VULNERABILITY INTELLIGENCE

CVE-2021-20035

CVSS score6.5 MEDIUM
EPSS probability4.41%
CISA KEVKnown exploited vulnerability
Published2021-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Known Exploited Vulnerability

SonicWall SMA100 Appliances OS Command Injection Vulnerability

Vendor / product: SonicWall / SMA100 Appliances

Description

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Weakness classification

  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references