CVE-2021-20017: SonicWall SMA100 Firmware

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.

Affected products

• SonicWall SMA100 Firmware: up to and including 10.2.0.5

Published 2021-03-13. Last modified 2026-06-17.