VulnerabilitycriticalExploited in the wild

SonicWall Urges Customers to Immediately Patch Critical SMA 100 Flaws

The Hacker Newsby @TheHackersNewsDec 9, 2021 · 05:18 UTC (Dec 9, 2021)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-20038 CVE-2021-20039 CVE-2021-20040 CVE-2021-20041 CVE-2021-20042 CVE-2021-20043 CVE-2021-20044 CVE-2021-20045

Tags: cve-2021-20038 cve-2021-20039 cve-2021-20040 cve-2021-20041 cve-2021-20042 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20038	Unauthenticated Stack Buffer Overflow in SonicWall SMA 100 Appliances	9.8	100%	KEVRansomwarePoC ×2	Dec 8, 2021 KEV Jan 28, 2022
CVE-2021-20045 +6 related CVEs CVE-2021-20042 CVE-2021-20039 CVE-2021-20044 CVE-2021-20043 CVE-2021-20040 CVE-2021-20041	A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as…	9.8 group max	25%		Dec 8, 2021

From the original article

1 min read at thehackernews.com

Network security vendor SonicWall is urging customers to update their SMA 100 series appliances to the latest version following the discovery of multiple security vulnerabilities that could be abused by a remote attacker to take complete control of an affected system. The flaws impact SMA 200, 210, 400, 410, and 500v products running versions 9. 0.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.