CVE-2021-20035
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
4.2%
90.5th percentile
CISA KEV
Listed
Added 2025-04-16 · patch by 2025-05-07
Weakness / dates
—
Published — · modified —
Description
SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.