CVE-2021-20028

2021-08-0419:10:09

CWE-89

sonicwall

www.cve.org

sql injection

secure remote access

sra appliances

8.x firmware

9.0.0.9-26sv

EPSS

0.024

Percentile

89.9%

JSON

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

CNA Affected

[
  {
    "product": "SonicWall SRA/SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "8.x firmware"
      },
      {
        "status": "affected",
        "version": "9.0.0.9-26sv and earlier."
      }
    ]
  }
]