Skip to content
OpenAdvisories
Critical · 9.8 Known exploited · Ransomware CVE-2021-20028 EUVD-2021-7491GHSA-2gf8-x72h-g57r

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, …

Published Aug 4, 2021 · Updated Oct 21, 2025 · Assigned by sonicwall

Description

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

Affected products

VendorProductAffectedFixed
SonicWall SonicWall SRA/SMA100 8.x firmware, 9.0.0.9-26sv and earlier. —

References