CVE-2021-20020CWE-287

A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root

published April 10, 2021

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

⚠️ An unauthenticated attacker can take command! This vulnerability in SonicWall GMS 9.3 allows someone to escalate privileges to root without needing to log in. 🔥 Think of it like a diner in a restaurant who can walk into the kitchen, don an apron, and start cooking without anyone batting an eye — it may sound funny, but it’s a recipe for disaster! If exploited, this could lead to an attacker gaining full control over the SonicWall GMS system, allowing them to do anything from data theft to complete system manipulation. Imagine the havoc a rogue chef could wreak in the kitchen — that’s the kind of chaos this vulnerability can unleash!

Put simply

Think of it like a diner in a restaurant who can walk into the kitchen, don an apron, and start cooking without anyone batting an eye — it may sound funny, but it’s a recipe for disaster! This command execution vulnerability allows remote attackers to escalate their privileges on the SonicWall GMS system, enabling them to execute commands with root access without authentication.

What to do

If exploited, this could lead to an attacker gaining full control over the SonicWall GMS system, allowing them to do anything from data theft to complete system manipulation. Imagine the havoc a rogue chef could wreak in the kitchen — that’s the kind of chaos this vulnerability can unleash! Ensure you are using the latest version of SonicWall GMS. Check for patches or updates that address this issue, and review your system configurations to limit unnecessary access. 🛡️ You’ve got this! By staying updated and proactive, you can keep your systems secure and your kitchen running smoothly. ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03730 · 89.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-04-10T06:50Z
EPSS history
Timeline
  • 10 APR 06:50Z
    A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root
    cvelistv5