CVE-2021-20040

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Score

CVSS 3.1 7.5 High

Status

Modified - PSIRT@sonicwall.com

Published

2021-12-08

Last modified

2024-08-03

Weaknesses

CWE-22, CWE-23

Affected products

• Sma 200 Firmware (Sonicwall)
• Sma 210 Firmware (Sonicwall)
• Sma 400 Firmware (Sonicwall)
• Sma 410 Firmware (Sonicwall)
• Sma 500v Firmware (Sonicwall)
• Sonicwall Sma100 (Sonicwall)

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026