CVE-2021-20038 is a critical stack-based buffer overflow vulnerability in the mod_cgi module of the Apache httpd server used in SonicWall SMA 100 series appliances (200, 210, 400, 410, 500v) running specific firmware versions. This flaw allows an unauthenticated remote attacker to execute arbitrary code as a 'nobody' user on the affected appliance. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low complexity and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. Its high EPSS score and FAUCET Risk Score of 100/100 underscore its severe threat. This CVE is actively exploited in the wild, including in known ransomware campaigns, and is listed in CISA's KEV catalog. While no Metasploit or ExploitDB modules are publicly available, Nuclei templates exist, and the vulnerability has garnered significant community discussion and media coverage, highlighting its widespread impact and active threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.2.0.8-37svCPE matchmatch criteria | cpe:2.3:o:sonicwall:sma_200_firmware:10.2.0.8-37sv:*:*:*:*:*:*:* | ||
10.2.1.1-19svCPE matchmatch criteria | cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.1-19sv:*:*:*:*:*:*:* | ||
10.2.1.2-24svCPE matchmatch criteria | cpe:2.3:o:sonicwall:sma_200_firmware:10.2.1.2-24sv:*:*:*:*:*:*:* | ||
10.2.0.8-37svCPE matchmatch criteria | cpe:2.3:o:sonicwall:sma_210_firmware:10.2.0.8-37sv:*:*:*:*:*:*:* | ||
10.2.1.1-19svCPE matchmatch criteria | cpe:2.3:o:sonicwall:sma_210_firmware:10.2.1.1-19sv:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.