Threat database

CVE-2020-5135 is a buffer overflow vulnerability in SonicWall SonicOS that allows remote attackers to cause Denial of Service (DoS) and potentially execute arbitrary code by sending malicious requests to the firewall. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

SonicWall SMA 100 Appliances are affected by an unauthenticated stack-based buffer overflow vulnerability (CVE-2021-20038) that can lead to remote code execution. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

CVE-2019-7481 is a SQL injection vulnerability in SonicWall SMA100 that allows unauthenticated users to gain read-only access to unauthorized resources. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

CVE-2021-20021 is an improper privilege management vulnerability in SonicWall Email Security that allows attackers to create an administrative account via a crafted HTTP request. This vulnerability is part of an exploit chain with CVE-2021-20022 and CVE-2021-20023 used for privilege escalation. It has been exploited in the wild and is associated with known ransomware campaigns.

CVE-2021-20022 is a vulnerability in SonicWall Email Security that allows a post-authenticated attacker to upload files of dangerous types to the remote host. This vulnerability is part of an exploit chain with CVE-2021-20021 and CVE-2021-20023, enabling privilege escalation. It has been exploited in the wild and is known to be used in ransomware campaigns.

CVE-2021-20023 is a path traversal vulnerability in SonicWall Email Security that allows an authenticated attacker to read arbitrary files on the affected system. This vulnerability has been observed in active exploit chains combined with other SonicWall Email Security vulnerabilities to escalate privileges. It is classified as high severity due to its impact and known exploitation in the wild.

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

KEVEPSS 4.4%VulnerabilitySonicWall#cwe-78Germany+7