CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
MEDIUM · CVSS 6.5
⚠ CISA KEV
EPSS 0.12838
Act now
- Listed on CISA KEV (known exploited in the wild)
- SSVC exploitation status: active
- EPSS ≥ 0.10 - elevated exploitation probability
- EPSS percentile: top 6% of all CVEs by exploitation likelihood
Sigma rules0
YARA rules0