|
195291
|
7.5 |
HIGH
Network
|
sonicwall
|
sma_100_firmware sma_200_firmware sma_210_firmware sma_400_firmware sma_410_firmware sma_500v_firmware
|
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2021-20049
|
2024-11-21 14:45 |
2021-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195292
|
8.8 |
HIGH
Adjacent
|
gryphonconnect
|
gryphon_tower_firmware
|
An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same ne…
|
CWE-78
OS Command
|
CVE-2021-20139
|
2024-11-21 14:45 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195293
|
8.8 |
HIGH
Adjacent
|
gryphonconnect
|
gryphon_tower_firmware
|
An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same networ…
|
CWE-78
OS Command
|
CVE-2021-20138
|
2024-11-21 14:45 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195294
|
6.1 |
MEDIUM
Network
|
gryphonconnect
|
gryphon_tower_firmware
|
A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by …
|
CWE-79
Cross-site Scripting
|
CVE-2021-20137
|
2024-11-21 14:45 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195295
|
7.8 |
HIGH
Local
|
sonicwall
|
global_vpn_client
|
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code ex…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2021-20047
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195296
|
9.8 |
CRITICAL
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This…
|
CWE-120
Classic Buffer Overflow
|
CVE-2021-20045
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195297
|
8.8 |
HIGH
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA…
|
CWE-78
OS Command
|
CVE-2021-20044
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195298
|
8.8 |
HIGH
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnera…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-20043
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195299
|
9.8 |
CRITICAL
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appl…
|
NVD-CWE-Other
|
CVE-2021-20042
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195300
|
7.5 |
HIGH
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfiles/sonicfiles resulting in a loop with unreachable exit cond…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2021-20041
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|