Critical severity · published Dec 8, 2021
CVE-2021-20042
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules
9.8
CVSS
3.7%
EPSS
No
On KEV
Description
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S2
Sma 200 Firmware · Sonicwall
9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv · source: NVD
S2
Sma 210 Firmware · Sonicwall
9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv · source: NVD
S4
Sma 400 Firmware · Sonicwall
9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv · source: NVD
S4
Sma 410 Firmware · Sonicwall
9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv · source: NVD
S5
Sma 500v Firmware · Sonicwall
9.0.0.11-31sv; 10.2.0.8-37sv; 10.2.1.1-19sv · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-20042
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-20042
Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026
More from Sma 200 Firmware
9.8
CVE-2021-20038
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
9.8
CVE-2021-20016
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
9.1
CVE-2024-38475
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
7.2
CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability
6.5
CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability