CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability

Published Sep 27, 2021
·
Updated

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Other sources

SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could potentially lead to code execution.

CISA

Affected Software

39 affected components
SonicWall Sma 200 Firmware<=9.0.0.10-28sv
SonicWall Sma 200 Firmware>=10.2.0.0<=10.2.0.7-34sv
SonicWall Sma 200 Firmware>=10.2.1.0<=10.2.1.0-17sv
SonicWall SMA 200
SonicWall Sma 210 Firmware<=9.0.0.10-28sv
SonicWall Sma 210 Firmware>=10.2.0.0<=10.2.0.7-34sv
SonicWall Sma 210 Firmware>=10.2.1.0<=10.2.1.0-17sv
SonicWall Sma 210
SonicWall Sma 400 Firmware<=9.0.0.10-28sv
SonicWall Sma 400 Firmware>=10.2.0.0<=10.2.0.7-34sv
SonicWall Sma 400 Firmware>=10.2.1.0<=10.2.1.0-17sv
SonicWall Sma 400
SonicWall Sma 410 Firmware<=9.0.0.10-28sv
SonicWall Sma 410 Firmware>=10.2.0.0<=10.2.0.7-34sv
SonicWall Sma 410 Firmware>=10.2.1.0<=10.2.1.0-17sv
SonicWall Sma 410
SonicWall Sma 500v<=9.0.0.10-28sv
SonicWall Sma 500v>=10.2.0.0<=10.2.0.7-34sv
SonicWall Sma 500v>=10.2.1.0<=10.2.1.0-17sv
SonicWall SMA100 Appliances
All of the following
Any of the following
SonicWall Sma 200 Firmware<9.0.0.11-31sv
SonicWall Sma 200 Firmware>=10.2.0.0<10.2.0.8-37sv
SonicWall Sma 200 Firmware>=10.2.1.0<10.2.1.1-19sv
SonicWall SMA 200
All of the following
Any of the following
SonicWall Sma 210 Firmware<9.0.0.11-31sv
SonicWall Sma 210 Firmware>=10.2.0.0<10.2.0.8-37sv
SonicWall Sma 210 Firmware>=10.2.1.0<10.2.1.1-19sv
SonicWall Sma 210
All of the following
Any of the following
SonicWall Sma 400 Firmware<9.0.0.11-31sv
SonicWall Sma 400 Firmware>=10.2.0.0<10.2.0.8-37sv
SonicWall Sma 400 Firmware>=10.2.1.0<10.2.1.1-19sv
SonicWall Sma 400
All of the following
Any of the following
SonicWall Sma 410 Firmware<9.0.0.11-31sv
SonicWall Sma 410 Firmware>=10.2.0.0<10.2.0.8-37sv
SonicWall Sma 410 Firmware>=10.2.1.0<10.2.1.1-19sv
SonicWall Sma 410
SonicWall Sma 500v<9.0.0.11-31sv
SonicWall Sma 500v>=10.2.0.0<10.2.0.8-37sv
SonicWall Sma 500v>=10.2.1.0<10.2.1.1-19sv

Remediation

Information

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Event History

Sep 27, 2021
CVE Published
via MITRE·05:20 PM
Data Sourced
via MITRE·05:20 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Apr 16, 2025
Known Exploited
via CISA·12:00 AM
Apr 17, 2025
News Published
via BleepingComputer·08:54 AM
News Published
via BleepingComputer·08:56 AM
Apr 18, 2025
News Published
via BleepingComputer·03:02 PM
Apr 30, 2025
News Published
via BleepingComputer·05:23 PM
May 8, 2025
News Published
via BleepingComputer·11:19 AM
Jul 16, 2025
News Published
via The Register·02:00 PM
News Published
via The Register·02:03 PM
News Published
via BleepingComputer·03:33 PM
Jul 24, 2025
News Published
via BleepingComputer·11:17 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-20035.

2

What is the severity of CVE-2021-20035?

The severity of CVE-2021-20035 is medium with a score of 6.5.

3

What is the affected software for CVE-2021-20035?

The affected software for CVE-2021-20035 includes Sonicwall SMA 200 Firmware, Sonicwall SMA 210 Firmware, Sonicwall SMA 400 Firmware, Sonicwall SMA 410 Firmware, and Sonicwall SMA 500v.

4

How does CVE-2021-20035 impact the system?

CVE-2021-20035 allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, potentially leading to a denial of service (DoS) attack.

5

Where can I find more information about CVE-2021-20035?

You can find more information about CVE-2021-20035 at the following link: [Sonicwall Advisory](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022)

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203