CVE-2021-20041CWE-835

An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles…

published December 8, 2021

CVSS
—
EPSS
21%
Percentile
97.6
In the wild
Unconfirmed
What it is

An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.21197 · 97.6th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2021-12-08T09:55Z
EPSS history
Timeline
  • 03 OCT 03:26Z
    EPSS moved 7% → 21%
    epss
  • 08 DEC 09:55Z
    An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles…
    cvelistv5