Description

Sonicwall SMA 100 allows an unauthenticated attacker to interact with hosts on the internal network which is otherwise not accessible externally.

Remediation

Upgrade to the latest version of Sonicwall

References

CVE-2021-20038..42: SonicWall SMA 100 Multiple Vulnerabilities

Related Vulnerabilities

ColdFusion AMF Deserialization RCE

IBM WebSphere RCE Java Deserialization Vulnerability

Oracle Weblogic Async Component Deserialization RCE CVE-2019-2725

Oracle WebLogic Remote Code Execution via T3

Deserialization of Untrusted Data (Java JSON Deserialization) Fastjson

Severity

Medium

Classification

CWE-441 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Acumonitor