CVE-2021-20016 · Sandworm Watch

Nov 3, 2021high

CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerability

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker. Required action: Apply updates per vendor instructions.

CVE-2021-20016EPSS 40.0%SSLVPN SMA100SonicWall

CISA KEV ↗ · unattributed attribution