CVE-2021-20018: Infoleak
Published Mar 13, 2021
·Updated
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.
Affected Software
2 affected components
SonicWall Sma100 Firmware<=10.2.0.5
SonicWall SMA100
Event History
Mar 13, 2021
CVE Published
via MITRE·02:10 AM
Data Sourced
via MITRE·02:10 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-20018?
CVE-2021-20018 is a post-authenticated vulnerability in SonicWall SMA100 that allows an attacker to export the configuration file to a specified email address.
2
What is the impact of CVE-2021-20018?
The impact of CVE-2021-20018 is that an attacker can export the configuration file of SonicWall SMA100 to their desired email address.
3
Which versions of SonicWall SMA100 are affected by CVE-2021-20018?
SonicWall SMA100 version 10.2.0.5 and earlier are affected by CVE-2021-20018.
4
What is the severity of CVE-2021-20018?
The severity of CVE-2021-20018 is medium with a CVSS score of 4.9.
5
How can I fix CVE-2021-20018?
To fix CVE-2021-20018, update to a version of SonicWall SMA100 that is later than 10.2.0.5.