CVE

CVE-2021-20016

P1⬤ KNOWN RANSOMWARE USE

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

SonicWall · SSLVPN SMA100

Date added (CISA)

2021-11-03

Remediation due

2021-11-17

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.