CVE-2021-20040
N/A
N/A
Summary
A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SonicWall | SonicWall SMA100 | 10.2.0.8-37sv and earlier | affected |
| SonicWall | SonicWall SMA100 | 10.2.1.1-19sv and earlier | affected |
| SonicWall | SonicWall SMA100 | 10.2.1.2-24sv and earlier | affected |
Weaknesses
- CWE-23: CWE-23: Relative Path Traversal
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.