CVE-2021-20017CWE-78

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user

published March 13, 2021

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01893 · 79.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-03-13T02:10Z
EPSS history
Timeline
  • 13 MAR 02:10Z
    A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user
    cvelistv5