CVE-2021-20050
23.12.2021, 02:15
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sonicwall | sma_100_firmware | 𝑥 < 10.0.0.0 |
| sonicwall | sma_100_firmware | 10.2.0.8-37sv |
| sonicwall | sma_100_firmware | 10.2.1.2-24sv |
| sonicwall | sma_200_firmware | 𝑥 < 10.0.0.0 |
| sonicwall | sma_200_firmware | 10.2.0.8-37sv |
| sonicwall | sma_200_firmware | 10.2.1.2-24sv |
| sonicwall | sma_210_firmware | 𝑥 < 10.0.0.0 |
| sonicwall | sma_210_firmware | 10.2.0.8-37sv |
| sonicwall | sma_210_firmware | 10.2.1.2-24sv |
| sonicwall | sma_400_firmware | 𝑥 < 10.0.0.0 |
| sonicwall | sma_400_firmware | 10.2.0.8-37sv |
| sonicwall | sma_400_firmware | 10.2.1.2-24sv |
| sonicwall | sma_410_firmware | 𝑥 < 10.0.0.0 |
| sonicwall | sma_410_firmware | 10.2.0.8-37sv |
| sonicwall | sma_410_firmware | 10.2.1.2-24sv |
| sonicwall | sma_500v_firmware | 𝑥 < 10.0.0.0 |
| sonicwall | sma_500v_firmware | 10.2.0.8-37sv |
| sonicwall | sma_500v_firmware | 10.2.1.2-24sv |
𝑥
= Vulnerable software versions
Common Weakness Enumeration