Actively exploited in the wild
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
SonicWall - SSLVPN SMA100 · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-20016
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A SQL injection vulnerability in SonicWall SSLVPN SMA100 allows a remote unauthenticated attacker to perform SQL queries to access usernames, passwords, and other session-related information. This affects SMA100 build version 10.x.
Risk Assessment
An attacker could obtain sensitive credentials and session data, potentially leading to unauthorized access and data breach.
Recommendation
Immediately update SMA100 to the latest patched version and restrict access to the management interface.
Original NVD description (English source)
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.