Vulnerability · Published Sep 27, 2021 · Assigned by sonicwall
CVE-2021-20034
Critical 9.1
In plain English
A critical-severity improper access control in SMA100 from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 81.8% (higher than 99.7% of all known vulnerabilities).
Severity (CVSS NVD)9.1Critical
Exploit odds (30 days)81.8%top 0.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
Affected products (as reported)
Weakness: CWE-284