vulnerability
SonicWall SMA 100: CVE-2021-20041: Unauthenticated CPU Exhaustion Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Dec 7, 2021 | Dec 7, 2021 | Dec 13, 2021 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Dec 7, 2021
Added
Dec 7, 2021
Modified
Dec 13, 2021
Description
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Solutions
sonicwall-sma-100-upgrade-10.2.0.9-41svsonicwall-sma-100-upgrade-10.2.1.3-27sv
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.