Sign-up

ID

VAR-202110-1958


CVE

CVE-2021-20050


TITLE

SMA100  Vulnerability in series

Trust: 0.8

sources: JVNDB: JVNDB-2021-016938

DESCRIPTION

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data. SMA100 The series has an unspecified vulnerability.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2021-20050 // JVNDB: JVNDB-2021-016938

AFFECTED PRODUCTS

vendor:sonicwallmodel:sma 100scope:eqversion:10.2.0.8-37sv

Trust: 1.0

vendor:sonicwallmodel:sma 100scope:eqversion:10.2.1.2-24sv

Trust: 1.0

vendor:sonicwallmodel:sma 400scope:eqversion:10.2.1.2-24sv

Trust: 1.0

vendor:sonicwallmodel:sma 210scope:ltversion:10.0.0.0

Trust: 1.0

vendor:sonicwallmodel:sma 410scope:eqversion:10.2.0.8-37sv

Trust: 1.0

vendor:sonicwallmodel:sma 200scope:eqversion:10.2.0.8-37sv

Trust: 1.0

vendor:sonicwallmodel:sma 400scope:eqversion:10.2.0.8-37sv

Trust: 1.0

vendor:sonicwallmodel:sma 410scope:eqversion:10.2.1.2-24sv

Trust: 1.0

vendor:sonicwallmodel:sma 200scope:eqversion:10.2.1.2-24sv

Trust: 1.0

vendor:sonicwallmodel:sma 500vscope:ltversion:10.0.0.0

Trust: 1.0

vendor:sonicwallmodel:sma 100scope:ltversion:10.0.0.0

Trust: 1.0

vendor:sonicwallmodel:sma 410scope:ltversion:10.0.0.0

Trust: 1.0

vendor:sonicwallmodel:sma 500vscope:eqversion:10.2.0.8-37sv

Trust: 1.0

vendor:sonicwallmodel:sma 500vscope:eqversion:10.2.1.2-24sv

Trust: 1.0

vendor:sonicwallmodel:sma 210scope:eqversion:10.2.0.8-37sv

Trust: 1.0

vendor:sonicwallmodel:sma 400scope:ltversion:10.0.0.0

Trust: 1.0

vendor:sonicwallmodel:sma 200scope:ltversion:10.0.0.0

Trust: 1.0

vendor:sonicwallmodel:sma 210scope:eqversion:10.2.1.2-24sv

Trust: 1.0

vendor:sonicwallmodel:sma100scope: - version: -

Trust: 0.8

vendor:sonicwallmodel:sma210scope: - version: -

Trust: 0.8

vendor:sonicwallmodel:sma500vscope: - version: -

Trust: 0.8

vendor:sonicwallmodel:sma200scope: - version: -

Trust: 0.8

vendor:sonicwallmodel:sma410scope: - version: -

Trust: 0.8

vendor:sonicwallmodel:sma400scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-016938 // NVD: CVE-2021-20050

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-20050
value: HIGH

Trust: 1.0

NVD: CVE-2021-20050
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202112-2135
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2021-20050
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2021-20050
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2021-20050
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2021-016938 // CNNVD: CNNVD-202112-2135 // NVD: CVE-2021-20050

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:CWE-284

Trust: 1.0

problemtype:others (CWE-Other) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-016938 // NVD: CVE-2021-20050

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202112-2135

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202112-2135

PATCH

title:SNWLID-2021-0031url:https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0031

Trust: 0.8

title:Sonicwall SMA100 Fixes for access control error vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=177008

Trust: 0.6

title:CVE-2021-22005_PoCurl:https://github.com/RedTeamExp/CVE-2021-22005_PoC

Trust: 0.1

sources: VULMON: CVE-2021-20050 // JVNDB: JVNDB-2021-016938 // CNNVD: CNNVD-202112-2135

EXTERNAL IDS

db:NVDid:CVE-2021-20050

Trust: 3.3

db:JVNDBid:JVNDB-2021-016938

Trust: 0.8

db:CS-HELPid:SB2021122102

Trust: 0.6

db:CNNVDid:CNNVD-202112-2135

Trust: 0.6

db:VULMONid:CVE-2021-20050

Trust: 0.1

sources: VULMON: CVE-2021-20050 // JVNDB: JVNDB-2021-016938 // CNNVD: CNNVD-202112-2135 // NVD: CVE-2021-20050

REFERENCES

url:https://psirt.global.sonicwall.com/vuln-detail/snwlid-2021-0031

Trust: 1.6

url:https://nvd.nist.gov/vuln/detail/cve-2021-20050

Trust: 1.4

url:https://www.cybersecurity-help.cz/vdb/sb2021122102

Trust: 0.6

url:https://github.com/redteamexp/cve-2021-22005_poc

Trust: 0.1

sources: VULMON: CVE-2021-20050 // JVNDB: JVNDB-2021-016938 // CNNVD: CNNVD-202112-2135 // NVD: CVE-2021-20050

SOURCES

db:VULMONid:CVE-2021-20050
db:JVNDBid:JVNDB-2021-016938
db:CNNVDid:CNNVD-202112-2135
db:NVDid:CVE-2021-20050

LAST UPDATE DATE

2024-08-14T15:11:43.064000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2021-016938date:2022-12-27T04:40:00
db:CNNVDid:CNNVD-202112-2135date:2022-10-24T00:00:00
db:NVDid:CVE-2021-20050date:2022-10-21T20:03:35.393

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2021-016938date:2022-12-27T00:00:00
db:CNNVDid:CNNVD-202112-2135date:2021-12-21T00:00:00
db:NVDid:CVE-2021-20050date:2021-12-23T02:15:06.637