Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-20038
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sonicwall SMA100 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sonicwall SMA100是美国Sonicwall公司的一款安全访问网关设备。 SonicWall SMA100 Apache httpd 服务器的 mod_cgi 模块环境变量中存在缓冲区错误漏洞，该漏洞允许未经身份验证的远程攻击者潜在地以设备中的nobody用户身份执行代码。此漏洞影响 SMA 200、210、400、410 和 500v 设备固件 10.2.0.8-37sv、10.2.1.1-19sv、10.2.1.2-24sv 和更早版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
SonicWallSonicWall SMA100 10.2.0.8-37sv and earlier -
II. Public POCs for CVE-2021-20038
#POC DescriptionSource LinkShenlong Link
1SonicWall SMA-100 Unauth RCE Exploit (CVE-2021-20038)https://github.com/jbaines-r7/badbloodPOC Details
2Nonehttps://github.com/vesperp/CVE-2021-20038-SonicWall-RCEPOC Details
3A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware 10.2.0.8-37sv, 10.2.1.1-19sv, 10.2.1.2-24sv and earlier versions.https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20038.yamlPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2021-20038
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: SonicWall SMA100
Same vendor: SonicWall
Same weakness: CWE-121
V. Comments for CVE-2021-20038

No comments yet

Leave a comment