2 lines
6.9 KiB
JSON
2 lines
6.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"SMA100","vendor":"SonicWall","versions":[{"status":"affected","version":"9.0.0.10-28sv and earlier"},{"status":"affected","version":"10.2.0.7-34sv and earlier"},{"status":"affected","version":"10.2.1.0-17sv and earlier"}]}],"source":"PSIRT@sonicwall.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"108AAFDC-548F-4450-9ABF-CAF42D759960","versionEndIncluding":"9.0.0.10-28sv","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7433B0B1-15C8-4D79-A83F-FE4D26C96AA4","versionEndIncluding":"10.2.0.7-34sv","versionStartIncluding":"10.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"71954BC8-24EC-40E9-9376-4827104DA661","versionEndIncluding":"10.2.1.0-17sv","versionStartIncluding":"10.2.1.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*","matchCriteriaId":"0B190266-AD6F-401B-9B2E-061CDD539236","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B4936140-6776-48A7-80FE-F526C8BA9D10","versionEndIncluding":"9.0.0.10-28sv","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C12FB28F-CC80-41C6-BBC5-384655CB8016","versionEndIncluding":"10.2.0.7-34sv","versionStartIncluding":"10.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_210_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"DF34C6CE-C99C-4956-AE18-971AC93A4DEB","versionEndIncluding":"10.2.1.0-17sv","versionStartIncluding":"10.2.1.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*","matchCriteriaId":"51587338-4A5F-41FC-9497-743F061947C2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"198EF039-97C1-498D-8521-8357E6E65843","versionEndIncluding":"9.0.0.10-28sv","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0F73402C-44D6-4B7A-B482-BAFB339DE78E","versionEndIncluding":"10.2.0.7-34sv","versionStartIncluding":"10.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_400_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"817E88C2-EC36-4DDD-B022-4417D7875B00","versionEndIncluding":"10.2.1.0-17sv","versionStartIncluding":"10.2.1.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*","matchCriteriaId":"9D728332-10C9-4508-B720-569D44E99543","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FE7AD359-EB77-478C-87D7-72C8C3DE8D45","versionEndIncluding":"9.0.0.10-28sv","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"324F8DFE-9AA8-4157-BC92-3F05AE1577D3","versionEndIncluding":"10.2.0.7-34sv","versionStartIncluding":"10.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:sonicwall:sma_410_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"95AC69B7-BDDF-49C7-8AFA-ADDF06A1E2AA","versionEndIncluding":"10.2.1.0-17sv","versionStartIncluding":"10.2.1.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*","matchCriteriaId":"9DFB8FBC-FFA4-4526-B306-D5692A43DC9E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","matchCriteriaId":"E65ABFDA-AC3F-4348-BF05-49CEE41C786C","versionEndIncluding":"9.0.0.10-28sv","vulnerable":true},{"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","matchCriteriaId":"6915D214-F408-4E1D-B10A-4D268CB0643A","versionEndIncluding":"10.2.0.7-34sv","versionStartIncluding":"10.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:sonicwall:sma_500v:*:*:*:*:*:*:*:*","matchCriteriaId":"52384213-F14E-446D-BD7D-4869C3B8140B","versionEndIncluding":"10.2.1.0-17sv","versionStartIncluding":"10.2.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en SMA100 permite a un atacante remoto no autenticado omitir las comprobaciones de salto de ruta y eliminar un archivo arbitrario, resultando potencialmente en un reinicio a la configuración predeterminada de fábrica"}],"id":"CVE-2021-20034","lastModified":"2026-06-17T03:33:10.953","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-09-27T18:15:08.327","references":[{"source":"PSIRT@sonicwall.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html"},{"source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021"}],"sourceIdentifier":"PSIRT@sonicwall.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"PSIRT@sonicwall.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-22"}],"source":"nvd@nist.gov","type":"Primary"}]}
|