CVE-2021-20035
MEDIUM KEVSonicWall SMA 200/210/400/410/500v < 9.0.0.11-31sv - Authenticated OS Command Injection
Title source: llmExploitation Summary
CVE-2021-20035 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 16, 2025.
Description
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20035
Scores
CVSS v3
6.5
EPSS
0.1284
EPSS Percentile
94.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
active
Automatable
no
Technical Impact
total
Details
CISA KEV
2025-04-16
VulnCheck KEV
2025-04-15
ENISA EUVD
EUVD-2021-7498
CWE
CWE-78
Status
published
Products (5)
sonicwall/sma_200_firmware
< 9.0.0.11-31sv
sonicwall/sma_210_firmware
< 9.0.0.11-31sv
sonicwall/sma_400_firmware
< 9.0.0.11-31sv
sonicwall/sma_410_firmware
< 9.0.0.11-31sv
sonicwall/sma_500v
< 9.0.0.11-31sv
Published
Sep 27, 2021
KEV Added
Apr 16, 2025
Tracked Since
Feb 18, 2026