Rewterz Threat Advisory – CVE-2021-20034 – SonicWall SMA 100 series appliances

Severity

High

Analysis Summary

CVE-2021-20034

SonicWall SMA 100 series appliances could allow a remote attacker to bypass security restrictions, caused by an improper limitation of a file path to a restricted directory. By sending a specially crafted request, an attacker could exploit this vulnerability to delete arbitrary files from a SMA 100 series appliance and possibly gain administrator access to the device.

Impact

• Security Bypass

Affected Vendors

• Sonicwall

Affected Products

• SonicWall SMA 200 9.0.0.10-28sv
• SonicWall SMA 200 10.2.0.7-34sv
• SonicWall SMA 200 10.2.1.0-17sv
• SonicWall SMA 210 9.0.0.10-28sv

Remediation

Refer to SonicWall Security Advisory for patch, upgrade or suggested workaround information.