CVE coverage
View on NVD →
CVE-2021-20039
CVSS 8.8
2 detections found
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET EXPLOIT SonicWall SMA Authenticated Command Injection Attempt CVE-2021-20039 | rev 3 | 2025-04-14 |
| snort | ET EXPLOIT SonicWall SMA Authenticated Command Injection Attempt CVE-2021-20039 | rev 2 | 2025-04-14 |