What is CVE-2021-20039?

CVE-2021-20039 is a vulnerability in Sonicwall Sma100, classified under OS Command Injection. Published 2021-12-08.

Is CVE-2021-20039 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Sonicwall Sma100

CVE-2021-20039

Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.825 (99.2th percentile) — read the EPSS interpretation.

Affected products

Sonicwall Sma100 — versions 9.0.0.11-31sv and earlier, 10.2.0.8-37sv and earlier, 10.2.1.1-19sv and earlier

Weakness classification (CWE)

CWE-78 — OS Command Injection

Public proof-of-concept exploits

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026 (x_refsource_CONFIRM)
packetstormsecurity.com/files/165563/SonicWall-SMA-100-Series-Authenticated-Com… (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-20039?: CVE-2021-20039 is a vulnerability in Sonicwall Sma100, classified under OS Command Injection. Published 2021-12-08.
Is CVE-2021-20039 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.