CVE:CVE-2021-20044
CNNVD:CNNVD-202112-551
Sonicwall SMA100是美国Sonicwall公司的一款安全访问网关设备。
SonicWall SMA100 中存在操作系统命令注入漏洞，该漏洞允许远程身份验证攻击者在设备中执行操作系统系统命令。此漏洞影响了 SMA 200、210、400、410 和 500v 设备。
solution:Upgrade sonicwall sma_200_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_210_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_410_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_400_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv; Upgrade sonicwall sma_500v_firmware to a higher version than 10.2.0.8-37sv,10.2.1.1-19sv,and avoid the version 10.2.0.8-37sv,10.2.1.1-19sv