CVE-2021-20043 — Heap-based Buffer Overflow in Sma100

CWE-122 — Heap-based Buffer OverflowCWE-787 — Out-of-bounds Write5 documents4 sources
Severity
8.8HIGHNVD
EPSS
4.9%
top 10.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Sonicwall Sma100Sonicwall SMA 200 FirmwareSonicwall SMA 210 Firmware+3 more
Timeline
PublishedDec 8
Latest updateApr 18

Description

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5sonicwall/sonicwall_sma10010.2.0.8-37sv and earlier, 10.2.1.1-19sv and earlier, 10.2.1.2-24sv and earlier+2
▶NVDsonicwall/sma_500v_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1
▶NVDsonicwall/sma_200_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1
▶NVDsonicwall/sma_210_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1
▶NVDsonicwall/sma_400_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1

🔴Vulnerability Details

2
GHSA
GHSA-857m-46rq-rj5c: A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code↗2021-12-09
▶
CVEList
CVE-2021-20043: A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code↗2021-12-08
▶

🔍Detection Rules

2
Suricata
ET WEB_SERVER SonicWall SMA Heap-Based Buffer Overflow (CVE-2021-20043)↗2025-04-18
▶
Suricata
ET EXPLOIT SonicWall SMA 100 Series - Possible Heap-Based Overflow Activity (CVE-2021-20043)↗2022-01-12
▶
CVE-2021-20043 — Heap-based Buffer Overflow in Sma100 | cvebase