Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2021-20050

Published: 23/12/2021 Updated: 21/10/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Sma 100 Firmware

Vulnerability Summary

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sonicwall sma_100_firmware 10.2.1.2-24sv

sonicwall sma_100_firmware 10.2.0.8-37sv

sonicwall sma_100_firmware

sonicwall sma_200_firmware 10.2.0.8-37sv

sonicwall sma_200_firmware 10.2.1.2-24sv

sonicwall sma_200_firmware

sonicwall sma_210_firmware 10.2.0.8-37sv

sonicwall sma_210_firmware 10.2.1.2-24sv

sonicwall sma_210_firmware

sonicwall sma_400_firmware 10.2.0.8-37sv

sonicwall sma_400_firmware 10.2.1.2-24sv

sonicwall sma_400_firmware

sonicwall sma_410_firmware 10.2.0.8-37sv

sonicwall sma_410_firmware 10.2.1.2-24sv

sonicwall sma_410_firmware

sonicwall sma_500v_firmware 10.2.0.8-37sv

sonicwall sma_500v_firmware 10.2.1.2-24sv

sonicwall sma_500v_firmware

Github Repositories

https://github.com/RedTeamExp/CVE-2021-22005_PoC

CVE-2021-22005_PoC

CVE-2021-22005_PoC CVE-2021-22005_PoC getshell: gistgithubcom/testanull/c2f6fd061c496ea90ddee151d6738d2e verify: githubcom/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923_WEB_Vmware_vCenter_Server_FIleUpload_CVE-2021-20050py

References

NVD-CWE-Otherhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0031https://nvd.nist.govhttps://github.com/RedTeamExp/CVE-2021-22005_PoC
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook