CVE:CVE-2021-20016
CNNVD:CNNVD-202102-394
Sonicwall SMA100是美国Sonicwall公司的一款安全访问网关设备。
SonicWall SSLVPN SMA100 product 存在SQL注入漏洞，该漏洞允许远程未经身份验证的攻击者执行SQL查询访问用户名密码和其他会话相关信息。
solution:Upgrade sonicwall sma_100_firmware to a higher version than 10.2.0.5-d-29sv,and avoid the version [10.0.0.0,10.2.0.5-d-29sv); Upgrade sonicwall sma_200_firmware to a higher version than -; Upgrade sonicwall sma_210_firmware to a higher version than -; Upgrade sonicwall sma_400_firmware to a higher version than -; Upgrade sonicwall sma_410_firmware to a higher version than -; Upgrade sonicwall sma_500v to a higher version than -