CVE-2021-20018: SonicWall SMA100 Firmware

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier.

Affected products

• SonicWall SMA100 Firmware: up to and including 10.2.0.5

Published 2021-03-13. Last modified 2026-06-17.