Skip to content
OpenAdvisories
Unscored CVE-2021-20026 EUVD-2021-7489GHSA-24h9-xh6m-x5jf

A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP …

Published May 27, 2021 · Updated Aug 3, 2024 · Assigned by sonicwall

Vendor: SonicWall Product: SonicWall NSM On-Prem Category: Network devices

Description

A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions.

Affected products

VendorProductAffectedFixed
SonicWall SonicWall NSM On-Prem NSM On-Prem 2.2.0-R10 and earlier —

References