Skip to content
OpenAdvisories
Critical · 9.8 Known exploited · Ransomware CVE-2021-20016 EUVD-2021-7479GHSA-c283-6775-92m9

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to acces…

Published Feb 3, 2021 · Updated Aug 12, 2026 · Assigned by sonicwall

Vendor: SonicWall Product: SonicWall SMA100 Category: Network devices

Description

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

Affected products

VendorProductAffectedFixed
SonicWall SonicWall SMA100 SMA100 build version 10.x —

References