Design/Logic Flaw

2021-12-0810:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

CPENameOperatorVersion
sma_200_firmwareeq9.0.11-31-sv
sma_200_firmwareeq10.2.8-37-sv
sma_200_firmwareeq10.2.11-19-sv
sma_210_firmwareeq9.0.11-31-sv
sma_210_firmwareeq10.2.8-37-sv
sma_210_firmwareeq10.2.11-19-sv
sma_400_firmwareeq9.0.11-31-sv
sma_400_firmwareeq10.2.8-37-sv
sma_400_firmwareeq10.2.11-19-sv
sma_410_firmwareeq9.0.11-31-sv

Name	Operator	Version
sma_200_firmware	eq	9.0.11-31-sv
sma_200_firmware	eq	10.2.8-37-sv
sma_200_firmware	eq	10.2.11-19-sv
sma_210_firmware	eq	9.0.11-31-sv
sma_210_firmware	eq	10.2.8-37-sv
sma_210_firmware	eq	10.2.11-19-sv
sma_400_firmware	eq	9.0.11-31-sv
sma_400_firmware	eq	10.2.8-37-sv
sma_400_firmware	eq	10.2.11-19-sv
sma_410_firmware	eq	9.0.11-31-sv