Vulnerabilities CVE-2021-20016

CVE-2021-20016

Medium

Open

KEV

TLP:CLEAR

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

Details

EPSS Score ⓘ: 36.95%

98.4th percentile
Confidence: 100%
Published: Feb 3, 2021
Last Modified: Aug 12, 2026
CISA KEV
Date Added: Nov 3, 2021
Patch Due: Nov 17, 2021
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.