CVE-2021-20040CWE-23

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a…

published December 8, 2021

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25150 · 97.9th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2021-12-08T09:55Z
EPSS history
Timeline
  • 08 DEC 09:55Z
    A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a…
    cvelistv5