Description

Sonicwall SMA 100 allows an unauthenticated attacker to interact with hosts on the internal network which is otherwise not accessible externally.

Remediation

Upgrade to the latest version of Sonicwall

References

CVE-2021-20038..42: SonicWall SMA 100 Multiple Vulnerabilities

Related Vulnerabilities

Atlassian OAuth Plugin IconUriServlet SSRF

SAP BO BIP XXE (CVE-2022-28213)

Jira Unauthorized SSRF via REST API

Deserialization of Untrusted Data (XStream)

Sitecore XP Deserialization RCE (CVE-2021-42237)

Severity

Medium

Classification

CWE-441 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Acumonitor