Skip to content
OpenAdvisories
Medium · 6.5 Known exploited CVE-2021-20035 EUVD-2021-7498GHSA-g24w-7v2m-52xh

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary c…

Published Sep 27, 2021 · Updated Oct 21, 2025 · Assigned by sonicwall

Description

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Affected products

VendorProductAffectedFixed
SonicWall SMA100 9.0.0.10-28sv and earlier, 10.2.0.7-34sv and earlier, 10.2.1.0-17sv and earlier —

References