CVE-2021-20030
published 2022-10-13CVE-2021-20030: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's…
PriorityP348high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.78%
51.5th percentile
SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sonicwall | global_management_system | < 9.3.2 | 9.3.2 |
| sonicwall | gms | — | — |
| sonicwall | sonicwall_gms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3xqx-3w36-qfg8: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing applicati
ghsa_unreviewed·2022-10-13
CVE-2021-20030 [HIGH] CWE-22 GHSA-3xqx-3w36-qfg8: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing applicati
SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files.
SonicWall
CVE-2021-20030: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing applicati
vendor_sonicwall·2022-10-13·CVSS 7.5
CVE-2021-20030 [HIGH] CWE-22 CVE-2021-20030: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing applicati
CVE-2021-20030: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-13
Published