Skip to content
OpenAdvisories
Unscored CVE-2021-20017 EUVD-2021-7480GHSA-q863-p6pj-6qfj

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobo…

Published Mar 13, 2021 · Updated Aug 3, 2024 · Assigned by sonicwall

Description

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.

Affected products

VendorProductAffectedFixed
SonicWall SMA100 10.2.0.5 and earlier —

References