vulnerability
SonicWall SMA 100: CVE-2021-20042: Unauthenticated "Confused Deputy" Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Dec 7, 2021 | Dec 7, 2021 | Dec 13, 2021 |
Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Dec 7, 2021
Added
Dec 7, 2021
Modified
Dec 13, 2021
Description
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Solutions
sonicwall-sma-100-upgrade-10.2.0.9-41svsonicwall-sma-100-upgrade-10.2.1.3-27sv
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.