coldbraid

CVE-2021-20016 SonicWall SSLVPN SMA100

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.

CVSS
not scored

CWE-89

On CISA’s exploited list

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

Added
2021-11-03
Federal patch deadline
2021-11-17
Ransomware use
known