CVE-2021-20035 SonicWall SMA100 Appliances
SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.
- CVSS
- not scored
On CISA’s exploited list
SonicWall SMA100 Appliances OS Command Injection Vulnerability
- Added
- 2025-04-16
- Federal patch deadline
- 2025-05-07
- Ransomware use
- not known