CVE-2021-20016
CriticalActively exploited (CISA KEV)Known to be used in ransomware campaigns
Description
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.
SeverityCritical
CVSS9.8
Exploit probability—
Product
SonicWall SSLVPN SMA100
PublishedFeb 4, 2021
First seenFeb 4, 2021
Added to KEVNov 3, 2021
Weakness typeCWE-89SQL injection
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Nov 17, 2021Update
- sonicwall sma_100_firmware10.2.0.5-d-29sv or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sonicwall sma_100_firmware | 10.0.0.0 ≤ v < 10.2.0.5-d-29sv | 10.2.0.5-d-29sv |
| sonicwall sma_200_firmware | No range specified | — |
| sonicwall sma_210_firmware | No range specified | — |
| sonicwall sma_400_firmware | No range specified | — |
| sonicwall sma_410_firmware | No range specified | — |
| sonicwall sma_500v | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.