CVE-2021-20045 — Classic Buffer Overflow in Sma100

CWE-120 — Classic Buffer Overflow6 documents4 sources
Severity
9.8CRITICALNVD
EPSS
4.5%
top 10.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Sonicwall Sma100Sonicwall SMA 200 FirmwareSonicwall SMA 210 Firmware+3 more
Timeline
PublishedDec 8
Latest updateApr 18

Description

A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5sonicwall/sonicwall_sma10010.2.0.8-37sv and earlier, 10.2.1.1-19sv and earlier, 10.2.1.2-24sv and earlier+2
▶NVDsonicwall/sma_500v_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1
▶NVDsonicwall/sma_200_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1
▶NVDsonicwall/sma_210_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1
▶NVDsonicwall/sma_400_firmware10.2.0.8-37sv, 10.2.1.1-19sv+1

🔴Vulnerability Details

2
GHSA
GHSA-8pg9-567c-mmc6: A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute↗2021-12-09
▶
CVEList
CVE-2021-20045: A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute↗2021-12-08
▶

🔍Detection Rules

3
Suricata
ET WEB_SERVER SonicWall SMA Unauthenticated Stack Buffer Overflow (CVE-2021-20045) M2↗2025-04-18
▶
Suricata
ET WEB_SERVER SonicWall SMA Unauthenticated Heap Buffer Overflow (CVE-2021-20045)↗2025-04-18
▶
Suricata
ET WEB_SERVER SonicWall SMA Unauthenticated Stack Buffer Overflow (CVE-2021-20045) M1↗2025-04-18
▶
CVE-2021-20045 — Classic Buffer Overflow in Sma100 | cvebase