Skip to content
OpenAdvisories
Unscored CVE-2021-20040 EUVD-2021-7503GHSA-f8vh-ph3q-qhmc

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages o…

Published Dec 8, 2021 · Updated Aug 3, 2024 · Assigned by sonicwall

Vendor: SonicWall Product: SonicWall SMA100 Category: Network devices

Description

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Affected products

VendorProductAffectedFixed
SonicWall SonicWall SMA100 10.2.0.8-37sv and earlier, 10.2.1.1-19sv and earlier, 10.2.1.2-24sv and earlier —

References