CVE:CVE-2021-20040
CNNVD:CNNVD-202112-555
Sonicwall SMA100是美国Sonicwall公司的一款安全访问网关设备。
SonicWall SMA100 上传功能中存在路径遍历漏洞，该漏洞允许未经身份验证的远程攻击者以nobody用户身份上传精心制作的网页或文件。此漏洞影响了 SMA 200、210、400、410 和 500v 设备。
solution:Upgrade sonicwall sma_200_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_210_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_410_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_400_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_500v_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv