Improper Access Control Vulnerability in SonicWall SMA100 Series
CVE-2021-20050

7.5HIGH

Key Information:

Vendor
Sonicwall
Status
Sonicwall Sma100
Vendor
CVE Published:
23 December 2021

Summary

The SonicWall SMA100 series suffers from an improper access control vulnerability that allows unauthorized access to restricted management APIs. This exposure could potentially reveal sensitive configuration metadata to attackers without requiring user login, thereby posing a security risk to the integrity of the system's management capabilities.

Affected Version(s)

SonicWall SMA100 10.2.0.8-37sv and earlier

SonicWall SMA100 10.2.1.2-24sv and earlier

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-202...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.