Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-20035

No fix known ExploitedEPSS 4%CVSS 6.5

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Published 2021-09-27 · In CISA KEV since 2025-04-16 · CVE record · OSV

Products: SonicWall SMA100