CVE-2021-20044CWE-78

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the…

published December 8, 2021

CVSS
—
EPSS
40%
Percentile
98.6
In the wild
Unconfirmed
What it is

A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.40067 · 98.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-12-08T09:55Z
EPSS history
Timeline
  • 08 DEC 09:55Z
    A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the…
    cvelistv5