Not rated
CVE-2021-20041 An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to…
Description
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit condition. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall SMA100 | Versions not published |
Other CVEs of SonicWall SMA100
The 11 CVEs of SonicWall SMA100 →
CVE-2021-20050
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being…
Not rated
CVE-2021-20049
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100…
Not rated
CVE-2021-20045
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated…
Not rated
CVE-2021-20044
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated…
Not rated