COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2021-20016

CVE-2021-20016

Severity
critical · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2021-11-03
Reference
https://nvd.nist.gov/vuln/detail/CVE-2021-20016
◐ zero-day ⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wildzero-day

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.

Players implicated

SonicWall · vendorSSLVPN SMA100 · product

Description

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.