CVEvulnerability

CVE-2021-20042

9.8 CRITICAL Published 2021-12-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-441

Description

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Affected configurations

• sonicwall sma 200 firmware 9.0.0.11-31sv • sonicwall sma 200 firmware 10.2.0.8-37sv • sonicwall sma 200 firmware 10.2.1.1-19sv • sonicwall sma 210 firmware 9.0.0.11-31sv • sonicwall sma 210 firmware 10.2.0.8-37sv • sonicwall sma 210 firmware 10.2.1.1-19sv • sonicwall sma 410 firmware 9.0.0.11-31sv • sonicwall sma 410 firmware 10.2.0.8-37sv • sonicwall sma 410 firmware 10.2.1.1-19sv • sonicwall sma 400 firmware 9.0.0.11-31sv • sonicwall sma 400 firmware 10.2.0.8-37sv • sonicwall sma 400 firmware 10.2.1.1-19sv • sonicwall sma 500v firmware 9.0.0.11-31sv • sonicwall sma 500v firmware 10.2.0.8-37sv • sonicwall sma 500v firmware 10.2.1.1-19sv

Related

Weakness · CWE (1)

  • CWE-441 Unintended Proxy or Intermediary weakness

References