CVE-2020-5146CWE-78

A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters

published January 9, 2021

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01907 · 79.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-01-09T00:15Z
EPSS history
Timeline
  • 09 JAN 00:15Z
    A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters
    cvelistv5