What is CVE-2021-20045?

CVE-2021-20045 is a vulnerability in Sonicwall Sma100, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). Published 2021-12-08.

Is CVE-2021-20045 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Sonicwall Sma100

CVE-2021-20045

A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 40…

Vulnerability class: Buffer Overflow

EPSS: 0.106 (93.4th percentile) — read the EPSS interpretation.

Affected products

Sonicwall Sma100 — versions 10.2.0.8-37sv and earlier, 10.2.1.1-19sv and earlier, 10.2.1.2-24sv and earlier

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

Public proof-of-concept exploits

UNC1739/awesome-vulnerability-research

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026 (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2021-20045?: CVE-2021-20045 is a vulnerability in Sonicwall Sma100, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). Published 2021-12-08.
Is CVE-2021-20045 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.