CVE-2021-20016 in SonicWall SSLVPN SMA100

الملخص

بحسب MITRE • 04/02/2021

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• حجز: 17/12/2020
• إفشاء: 04/02/2021
• الاعتدال: تمت الموافقة
• إدخال: VDB-169195
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.36952
• KEV: نعم
• النشاطات: منخفض جدًا
• القطاع: Pharma, Transportation, ...
• حملات: 1 (مؤكد)
• IOC: 11 (مؤكد)

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-20016
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-20016
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-20016/