VULNERABILITY INTELLIGENCE

CVE-2021-20042

CVSS score9.8 CRITICAL
EPSS probability3.68%
CISA KEVNot currently listed
Published2021-12-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Weakness classification

  • CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')

Primary references