What’s Vulnerable › Vulnerabilities

CVE-2021-20042

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-08 · updated 2026-06-17
• Weakness: CWE-441

Description

An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

Affected products

• SonicWall Sma 200 Firmware: 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv
• SonicWall Sma 210 Firmware: 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv
• SonicWall Sma 400 Firmware: 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv
• SonicWall Sma 410 Firmware: 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv
• SonicWall Sma 500V Firmware: 9.0.0.11-31sv, 10.2.0.8-37sv, 10.2.1.1-19sv

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0026

Get alerted when CVE-2021-20042 or the next vulnerability affects your stack